JFrog Artifactory is under active attack via a critical authentication bypass vulnerability (CVE-2026-82329, CVSS 9.8) that lets unauthenticated attackers mint admin tokens, with public exploitation o…
Hackers are actively exploiting CVE-2026-64849, a critical unauthenticated Server-Side Request Forgery (SSRF) vulnerability in MLflow, an open-source AI development platform used by thousands of organ…
GitLab has patched a critical vulnerability, CVE-2026-19478, that could let unauthenticated attackers modify or delete public repositories via a single HTTP request, along with a high-risk CSRF flaw (…
Hackers are mass-exploiting two WordPress flaws, dubbed wp2shell, within hours of patches being shipped in versions 7.0.2 and 6.9.5, with an AI model used both to discover the chain and to weaponize i…