Chromium’s Unfixed Service Worker Flaw Creates Browser Botnets
Google accidentally leaked PoC exploit code for a 42-month-old Chromium flaw that silently turns browsers into botnet nodes via the Background Fetch API. ...
Microsoft Copilot Cowork Exfiltrates Your Files — No Approval Required
Microsoft’s enterprise AI agent can be manipulated to silently send your organization’s files to an ...
LiteLLM Agent Platform: Run AI Coding Agents on Kubernetes
BerriAI open-sourced LiteLLM Agent Platform on May 8 — a self-hosted Kubernetes layer with credential ...
Verizon DBIR 2026: Exploits Now Outrank Stolen Credentials
For 19 consecutive years, the top way attackers broke into systems was the same: steal ...
LiteSpeed cPanel CVE-2026-48172: Patch Now or Lose Root
CVE-2026-48172 (CVSS 10.0) lets any cPanel user run scripts as root via one API call. ...
TrapDoor Supply Chain Attack: npm, PyPI, and Crates.io Hit (2026)
TrapDoor malware hit 34 packages across npm, PyPI, and Crates.io — and uses invisible Unicode to poison AI coding tool context files like ...
Docker AI Governance: Lock Down Your AI Agents Now
Docker AI Governance ships microVM isolation and centralized policy for AI agents. Here is what ...
Project Glasswing: AI Found 10,000 Bugs — Patching Is the Bottleneck
Glasswing found 10,000+ high-severity vulnerabilities in a month. The bottleneck shifted from finding to patching. ...
Next.js 13 CVEs: Upgrade to 15.5.18 or 16.2.6 Now
Vercel patched 13 Next.js vulnerabilities on May 7, including SSRF, middleware auth bypass, and React ...
MCP Tool Poisoning: Microsoft’s .NET Fix Is Now Available
MCP tool poisoning hits production agents at 60%+ success rate. Microsoft’s new NuGet package adds ...