More than 40,000 WordPress sites using the Quiz and Survey Master plugin have been affected by a SQL injection vulnerability that allowed authenticated users to interfere with database queries.

Google Threat Intelligence Group (GTIG) has published a new report warning about AI model extraction/distillation attacks, in which private-sector firms and researchers use legitimate API access to ...

A newly disclosed weakness in Google’s Gemini shows how attackers could exploit routine calendar invitations to influence the model’s behavior, underscoring emerging security risks as enterprises ...

A new open-source and cross-platform tool called Tirith can detect homoglyph attacks over command-line environments by ...

Researchers discover Gemini AI prompt injection via Google Calendar invites Attackers could exfiltrate private meeting data with minimal user interaction Vulnerability has been mitigated, reducing ...

Clawdbot's MCP implementation has no mandatory authentication, allows prompt injection, and grants shell access by design. Monday's VentureBeat article documented these architectural flaws. By ...

January 25, 2026 (ED DAMAZIN) – The Rapid Support Forces (RSF) and Sudan People’s Liberation Movement-North (SPLM-N) launched a large-scale attack on Sunday targeting areas in Sudan’s Blue Nile region ...