Two major remote code execution vulnerabilities have been disclosed and patched in GitHub and the Cursor IDE. GitHub’s CVE-2026-3854 allowed authenticated users to execute arbitrary commands via a ...

Incomplete patch for a Windows SmartScreen and Windows Shell security prompts bypass created a new bug enabling zero-click ...

Veeam patches five Backup & Replication flaws Three critical RCE bugs (CVE-2026-21666, -21667, -21708) fixed Company urges immediate upgrades to avoid exploitation Veeam has said it recently patched ...

CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server ...

The prompt-injection issue in the agentic AI product for filesystem operations was a sanitization issue that allowed for ...

Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...

The Interlock ransomware gang has been exploiting a maximum severity remote code execution (RCE) vulnerability in Cisco's Secure Firewall Management Center (FMC) software in zero-day attacks since ...

This week's biggest hacks, zero-days, supply chain attacks, crypto theft, ransomware hits, and critical patches — all in one ...