CVE-2026-44009 (CVSS score: 9.8) - A vulnerability that allows sandbox escape via a null proto exception and permits an ...

Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code ...

As Southeast Asia emerges as a crucial region for Web3 user growth and the deployment of on-chain applications, market demand ...

CLI-Anything generates SKILL.md files that AI agents trust and execute. Snyk found 13.4% of agent skills contain critical ...

KelpDAO is migrating its rsETH token from LayerZero’s OFT standard to Chainlink’s CCIP after an April exploit drained $292 million. The project released evidence showing LayerZero approved the ...

AI search is a multiplicative system where one weak signal limits results. Diagnose bottlenecks, prioritize fixes, and ...

Several npm packages for SAP's cloud application development ecosystem have been compromised as TeamPCP's supply chain ...

Mythos combined four separate low-severity bugs into a complete browser sandbox escape. Traditional scanners evaluate vulnerabilities in isolation. That assumption is now broken.

Iran called on its youth Tuesday to form human chains around its power plants — after President Trump threatened to decimate the Islamic Republic’s energy infrastructure if Tehran fails to reopen the ...

Iranian officials on Tuesday urged their people to form human chains around power plants as the country faces a deadline set by President Trump to reopen the Strait of Hormuz or risk major strikes on ...

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver remote access trojans to Linux, Windows, and macOS systems. One malicious ...