WordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under ...

CVE-2026-41679, a critical vulnerability in Paperclip, allowed attackers to gain administrative privileges and code execution ...

In the worst-case scenario, attackers can execute malicious code and completely compromise n8n servers. Even though there are ...

TP-Link has patched 15 vulnerabilities in the zero-touch provisioning (ZTP) mechanism of its Omada network devices that could ...

The zero-telemetry Orion browser finally makes its way to Linux as a beta release. It's also available for MacOS, iOS, and ...

keyv npm supply chain attack on August 4, 2026 let the Shai-Hulud worm compromise 400-plus packages and more than two billion ...

OpenAI is splitting its cybersecurity program into two access tiers and releasing a new purpose-trained model alongside them, the company announced on. Daybreak Blue opens frontier general-purpose ...

A trojanized QuickFox Windows installer delivered FDMTP in a supply chain attack active since at least August 2025, after ...

Meta launches Muse Code, a terminal-based AI coding agent built to handle large software projects and compete with Claude ...

A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators' browsers to create ...

A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...

OpenAI’s documents list pricing for GPT-5.6-Cyber at $12.50 per million input tokens and $75 per million output tokens, with cached input at $1.25 per million tokens.