Two zero-day flaws in Microsoft Defender, the antivirus engine built into every Windows installation, are already being exploited by attackers to gain elevated privileges on target systems. Both ...

A curated corpus of real-world security incidents, attack techniques, CVEs, frameworks, and defensive tools for autonomous AI agents. From zero-click Copilot exfiltration to AI-powered C2 channels — ...

Cisco confirmed that attackers are now exploiting a Unified Communications Manager (Unified CM) vulnerability patched in ...

MCP tool poisoning turns trusted AI agents into a control plane for data loss. Learn how threat actors manipulate tool ...

The popular product lifecycle management platform is under active exploitation for an RCE vulnerability that could put ...

New activity targets CVE‑2026‑20230, an SSRF bug that can allow unauthenticated file writes and potential root‑level access ...

Chainguard will use AI to protect open-source code. Athena pools open-source users, developers, and maintainers. Others are ...

This page documents recurring attack classes that DOMPurify and other DOM-based HTML sanitizers have had to withstand: HTML parser mutation, namespace confusion, rawtext breakouts, depth-limit ...

An IEEE standard for local and metropolitan area networks–Port-Based Network Access Control. IEEE 802 LANs are deployed in networks that convey or provide access to critical data, that support mission ...