A weekly look at exploited flaws, exposed systems, supply-chain attacks, browser abuse, malware campaigns, and the security risks that mattered most.

August’s Patch Tuesday is a big one: 751 fixes, an exploited WinSock flaw and plenty of critical Windows, Office and Exchange issues.

After taking second place in the professional category of the Florida Python Challenge this year, Taylor Stanberry is ready ...

Spread the love“`html If you’re a developer, or even just someone who dabbles in code, chances are you’ve spent a fair bit of ...

After a multi-year hiatus, the venerable BugTraq mailing list is back! For decades, BugTraq was the place where vulnerabilities were disclosed, from the early days when nearly all vendors viewed ...

Because 'trust me' isn't a permission model for your AI coding agent.

Vulnerabilities can lurk within production code for years or decades — and AI tools have opened a gateway to a glut of new long-hidden discoveries.

Development environments have evolved into toolkits for directing coding models and coordinating agents. GitHub Copilot, ...

A researcher demonstrated a proof-of-concept attack chain that provided C2-style influence over ChatGPT's isolated sandbox at Black Hat USA 2026.

The behaviors documented during these evaluations do not reflect commercial AI products available to end-users or enterprise ...

Google has fixed the issues, which exploited a trust boundary between two AI agents with different privileges to potentially ...

Tom Fenton tackles seven free and open-source AI tools bring local chat, coding, voice, design and research capabilities to personal computers and self-hosted environments.