Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code
Ravie LakshmananAug 03, 2026Vulnerability / AI Security Three high-severity security flaws have been disclosed in Hugging Face's Diffusers library that...
flaws
NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats
Swati KhandelwalJul 24, 2026Web Security / Vulnerability Eight security flaws in NodeBB went public on Wednesday, along with the code...
Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws
Ravie LakshmananJul 15, 2026Vulnerability / Browser Security Mozilla has released updates to address two critical flaws in Firefox for which...
Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot
Researchers at firmware security firm Binarly have found six new flaws in U-Boot, the small program that starts up hardware as varied...
Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands
Swati KhandelwalJul 01, 2026AI Coding / Vulnerability Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking...
AirDrop and Quick Share Flaws Let Nearby Attackers Trigger Crashes and Bypass Checks
Two researchers have found six security flaws in AirDrop and Quick Share, the wireless features that beam files between nearby...
Microsoft Confirms Windows Recycle Bin Bug Affects All Supported Versions
Microsoft’s latest security update fixed over 200 flaws in Windows and somehow broke the simple act of deleting a file....
U.S. CISA adds BerriAI LiteLLM and Check Point Security Gateway flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds BerriAI LiteLLM and Check Point Security Gateway flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June...
U.S. CISA adds Android and Linux Kernel flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Android and Linux Kernel flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June 03, 2026 U.S. Cybersecurity...
Four OpenClaw Flaws Enable Data Theft, Privilege Escalation, and Persistence
Ravie LakshmananMay 15, 2026Vulnerability / AI Security Cybersecurity researchers have disclosed a set of four security flaws in OpenClaw that...
New WhatsApp Flaws Could Affect Billions of Users After Meta Security Patch
WhatsApp users should update their apps after Meta patched two flaws that could make risky files and links harder to...
The Invisible Threat: Business Logic Flaws in Modern Applications and Why Scanners Miss Them
The post The Invisible Threat: Business Logic Flaws in Modern Applications and Why Scanners Miss Them appeared first on Security,...
Microsoft Defender Flaws Exploited on Windows, Two Left Unpatched
Image: monticellllo/Adobe Stock No less than three new security flaws are actively being exploited in Microsoft Defender… and only one...
Mirai Variant Nexcorium Exploits CVE-2024-3721 to Hijack TBK DVRs for DDoS Botnet
Ravie LakshmananApr 18, 2026IoT Security / Vulnerability Threat actors are exploiting security flaws in TBK DVR and end‑of‑life (EoL) TP-Link...
Russia Hacked Routers to Steal Microsoft Office Tokens
Hackers linked to Russia’s military intelligence units are using known flaws in older Internet routers to mass harvest authentication tokens...
