CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server ...

An unpatched vulnerability in Anthropic's Model Context Protocol creates a channel for attackers, forcing banks to manage the ...

Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...

Cybersecurity researchers have discovered a critical "by design" weakness in the Model Context Protocol's (MCP) architecture ...

Hackers are exploiting a critical vulnerability in Marimo reactive Python notebook to deploy a new variant of NKAbuse malware ...

A design flaw – or expected behavior based on a bad design choice, depending on who is telling the story – baked into ...

A multi-tenant authentication gap in Microsoft’s AI operations agent exposed live command streams, internal reasoning, and ...

An internal Google memo, first circulated in early April 2026 and since described by multiple people familiar with its ...

On the silicon side, Nvidia's tech let Humanoid slash hardware development from the usual 18–24 months to just seven months. Executives pitched the deployment as proof that factory-grade humanoids can ...

A design choice in the MCP SDKs allows remote code execution across the AI supply chain.

Every secure API draws a line between code and data. HTTP separates headers from bodies. SQL has prepared statements. Even email distinguishes the envelope from the message. The Model Context Protocol ...

Opus 4.7 utilizes an updated tokenizer that improves text processing efficiency, though it can increase the token count of ...