Three vulnerabilities in Anthropic’s MCP Git server allow prompt injection attacks that can read or delete files and, in some ...

Researchers found an indirect prompt injection flaw in Google Gemini that bypassed Calendar privacy controls and exposed ...

Update to the latest version and monitor for unexpected .git directories in non-repository folders, developers are told.

The phishing campaign shows how attackers continue to weaponize legitimate cloud services and open source tools to evade ...

The Medicines and Healthcare products Regulatory Agency (MHRA) has approved a new long-lasting prophylactic treatment for HIV-1 that is administered once every 6 months. Lenacapavir (Yeytuo, Gilead ...

Open WebUI carried CVE-2025-64496, a high-severity code injection flaw in Direct Connection features Exploitation could enable account takeover and RCE via malicious model URLs and Functions API ...

Malicious Chrome extensions on the Chrome Web Store masquerading as productivity and security tools for enterprise HR and ERP ...