Unpatched Gogs flaw CVE-2025-8110 enables file overwrite and code execution, driving over 700 confirmed compromises.

Huntress reports active attacks abusing Gladinet’s fixed cryptographic keys to forge tickets and gain remote code execution ...

A stealthy campaign with 19 extensions on the VSCode Marketplace has been active since February, targeting developers with ...

French AI startup Mistral today launched Devstral 2, a new generation of its AI model designed for coding, as the company ...

Leaked One UI 8.5 code suggests Samsung's My Files app will soon offer short summaries for PDF and text files before you open them.

In the Barracuda Networks Inc. case, a single unauthenticated SOAP request was sufficient to force the application to import ...

A new campaign involving 19 malicious Visual Studio Code extensions used a legitimate npm package to embed malware in ...

Microsoft's latest VS Code update enables Copilot and custom agents to collaborate via the new Agent HQ. It also integrates ...

Splunk for Windows has a high-severity flaw that lets local users escalate privileges through misconfigured file permissions.

Built for large, long-lived codebases, Augment’s Code Review leads industry benchmarks, catches issues missed by competing ...

Wiz disclosed a still-unpatched vulnerability in self-hosted Git service Gogs, which is a bypass for a previous RCE bug ...

The rise of autonomous AI Agents – systems that plan, delegate, and execute complex workflows – has fundamentally reshaped the application security landscape. Just yesterday, the OWASP GenAI Security ...