Attackers can abuse the near-maximum severity flaw in nginx-ui to restart, create, modify, and delete NGINX configuration ...

CVE-2026-33032 exposes nginx-ui to unauthenticated takeover via MCP endpoint, impacting 2,600+ instances with active ...

Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...

Plugins for AI coding tools sound like complex infrastructure. In practice, Markdown files and an HTTP API are sufficient.

The decade-old ActiveMQ flaw was uncovered and weaponized in minutes, showing AI’s exploit-building potential amid the Mythos ...

Two vulnerabilities in Progress ShareFile, an enterprise-grade secure file transfer solution, can be chained to enable ...

Fortinet patched 27 vulnerabilities, including two critical FortiSandbox flaws leading to authentication bypass and code ...

Bifrost stands out as the leading MCP gateway in 2026, pairing native Model Context Protocol support with Code Mode to cut ...

AI chatbots make it possible for people who can’t code to build apps, sites and tools. But it’s decidedly problematic.

Horizon3.ai chief architect, Naveen Sunkavally, explained in a blog post, published on April 7, that remote code execution ...

Alpaca rolled out version 2 of its MCP Server, marking overhaul of platform that connects artificial intelligence assistants ...

FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...