Threat actors have started exploiting CVE-2025-59528, a critical Flowise vulnerability leading to remote code execution.

GlassWorm uses a fake WakaTime VS Code extension to infect IDEs, deploy RATs, and steal data, prompting urgent credential ...

The design flaw in Flowise’s Custom MCP node has allowed attackers to execute arbitrary JavaScript through unvalidated ...

PM This week in cybersecurity: botnets, RCE flaws, AI-driven attacks, stealers, and more. Fast, no-fluff roundup.

A new wave of device code phishing shows how threat actors are scaling account compromise using AI and end‑to‑end automation.

As enterprises rely more heavily on AI technologies and services, attackers’ living-off-the-land techniques have evolved to ...

The Internet Bug Bounty program has paused new submissions, citing a massive expansion in vulnerability discovery by AI code ...