Hackers are exploiting CVE-2026-5027, a high-severity path traversal issue in Langflow, for remote code execution.

Six Proto6 flaws in protobuf.js enable RCE and DoS attacks; patched in versions 7.5.6 and 8.0.2 to protect Node.js services.

A flaw in Hugging Face Transformers could allow malicious AI models to execute code, exposing credentials and highlighting AI ...

npm 12 disables install scripts by default, requiring explicit approval to reduce dependency-based code execution risks.

Microsoft's June Patch Tuesday fixed a record 206 vulnerabilities, including an actively exploited Windows Defender flaw.

Today is Microsoft's June 2026 Patch Tuesday, with security updates for 200 flaws, including five publicly disclosed zero-day ...

In a nutshell: On the second Tuesday of every month, Microsoft addresses the overall security of its many software products. The Patch Tuesday tradition has continued for more than 20 years, but the ...

Microsoft's June 2026 Patch Tuesday update fixes 206 vulnerabilities, including all zero-days disclosed by Nightmare Eclipse ...

The Mitiga disclosure is the most recent, but it is not the first time Claude Code’s configuration model has created a ...

With npm v12, GitHub closes a central attack vector: installation scripts from dependencies will only run after explicit ...

Google has released emergency updates to patch another Chrome zero-day vulnerability that has been exploited in the wild, the ...

Chrome 149 was released with patches for 429 vulnerabilities, including over 100 critical and high-severity bugs.