Researchers who found the bug warn that its Moderate rating understates a threat reaching across LLM gateways, MCP servers ...
The risk is "materially understated", researchers are saying as passwords and critical data can be exfiltrated.
The ChromaToast vulnerability can be exploited by forcing the ChromaDB API server to fetch and load maliciously crafted AI ...
A security researcher published six vulnerabilities in llama.cpp's model-file parser to the oss-security mailing list on May 15, 2026 — and none of them carry an assigned CVE number, meaning standard ...
Open source robotics AI platform LeRobot surpassed 58,000 community datasets in 2026 — 50x growth in under a year — making it the largest dataset category on Hugging Face and signaling a ...
A serious security vulnerability in a widely used open-source Python component could put a large number of AI agents ...
A multi-stage attack on Linux devices began with an exposed F5 BIG-IP edge appliance and pivoted to an internal Confluence ...
Hackers are exploiting unsupported F5 BIG-IP appliances to gain SSH access to enterprise Linux systems, turning trusted edge infrastructure into entry points for deeper attacks on identity systems and ...
Millions of AI agents and tools around the world have been imperiled by a critical vulnerability that can allow hackers to ...
Drupal has patched CVE-2026-9082, a highly critical vulnerability that could allow threat actors to hack websites.
Microsoft says it is considering a patch for a zero-day vulnerability, dubbed YellowKey, that allows attackers with access to ...