Cisco/Splunk disclosed CVE-2026-76404, the first critical vulnerability in a vendor-backed, enterprise-grade MCP server, with a CVSS 9.1 severity rating. The flaw, an insecure deserialization (CWE-502…
CVE-2026-75130, a prompt-injection vulnerability in Context7, Upstash's MCP documentation server, scores 9.0 critical under CVSS 3.1 and 6.4 medium under CVSS 4.0, with no public fix documented for af…
The National Institute of Standards and Technology (NIST) is requesting public comments on how artificial intelligence should modernize the National Vulnerability Database (NVD), disclosing an unrelea…
NIST published a Request for Information on August 12, 2026, seeking public input on modernizing the National Vulnerability Database (NVD) for the AI era, with comments due October 13, 2026. The RFI f…
The US National Institute of Standards and Technology (NIST) is asking industry for input on how to handle the growth and complexity of vulnerabilities, driven by AI, as it prepares further changes to…
The National Institute of Standards and Technology (NIST) published a Request for Information on Wednesday seeking input on modernizing its National Vulnerability Database (NVD) with artificial intell…
The National Institute of Standards and Technology (NIST) issued a Request for Information (RFI) seeking stakeholder input on modernizing the National Vulnerability Database (NVD) in a cybersecurity l…
The National Institute of Standards and Technology (NIST) is seeking public input on overhauling its National Vulnerability Database (NVD) to address challenges posed by artificial intelligence and ma…
JFrog Security Research reported that 54 of 55 CVE advisories published from a new GitHub account were AI-hallucinated, with six targeting SQLite and all six entering the National Vulnerability Databa…
JFrog's security research team found that 54 of 55 SQLite advisories filed as critical CVEs were fabricated by an AI language model, including CVE-2026-51302, which was withdrawn four days after publi…
China's National Vulnerability Database flagged a security back door in Anthropic's Claude Code tool, prompting Beijing to urge local organizations to uninstall or upgrade the software. Analysts expec…
China's National Vulnerability Database issued a security alert on Wednesday warning that Anthropic's AI coding tool Claude Code contains a built-in monitoring mechanism that can transmit sensitive us…
China's National Vulnerability Database warned on Wednesday that Anthropic's AI coding tool Claude Code contains a security backdoor that could transmit sensitive user data without consent. The regula…
FIRST.org revised its 2026 CVE forecast to approximately 66,000, a 46.3% increase from its February estimate, driven primarily by AI-assisted vulnerability discovery. Anthropic's Mythos Preview, part …
The security podcast "The Department of Know" released an episode covering an audit of the National Vulnerability Database, reports of data leakage from Meta's AI systems, and Microsoft's progress tow…