Over 750,000 websites require patching following discovery of DotNetNuke XSS vulnerability ...

Flaws in OpenEMR's platform — used by more than 100,000 healthcare providers — enabled database compromise, remote code ...

Hackers rushed to target a critical LiteLLM SQL injection flaw to steal keys, credentials, and environment-variable ...

CVE-2026-42208 exploited within 36 hours of disclosure, exposing LiteLLM credentials, risking cloud account compromise.

In today's security landscape, some of the most dangerous vulnerabilities aren't flagged by automated scanners at all. These ...

A new gene therapy is giving people born deaf the chance to hear, often within just weeks. In a small but groundbreaking study, researchers delivered a working copy of a key hearing gene directly into ...

A critical SQL injection flaw in FortiClient EMS allows remote code execution and data exfiltration, leaving thousands of internet facing systems at risk. Yet another critical flaw in a Fortinet ...

Marshall Gunnell is a Tokyo-based tech journalist and editor with over a decade of experience covering IT, cybersecurity and data storage. Alongside CNET, his work has appeared in ZDNET, Business ...

PCWorld reports that Microsoft Edge update 145 removes the ability to create new master passwords for the browser’s password manager feature. Existing master passwords will continue functioning until ...

More than 40,000 WordPress sites using the Quiz and Survey Master plugin have been affected by a SQL injection vulnerability that allowed authenticated users to interfere with database queries. The ...

Prompt injection vulnerabilities may never be fully mitigated as a category and network defenders should instead focus on ways to reduce their impact, government security experts have warned. Then ...

The UK’s National Cyber Security Centre (NCSC) has highlighted a potentially dangerous misunderstanding surrounding emergent prompt injection attacks against generative artificial intelligence (GenAI) ...