Vulnerability (CVE)
Vercel disclosed a breach in which attackers compromised the third-party AI tool Context.ai, used that access to take over an employee's Vercel Google Workspace account, and reached some Vercel environments and environment variables not marked as...
Threat actors exploited CVE-2026-26980, a CVSS 9.4 SQL injection in Ghost CMS's Content API patched in version 6.19.1 in February 2026, to obtain sites' Admin API keys and inject malicious JavaScript loaders into articles in bulk. First detected on May 7,...
Anthropic expanded its Cyber Verification Program, giving vetted security teams three tiers of access to models including Claude Opus 5.5, Sonnet 5.5, and Mythos 5.1 with reduced safeguards, and said Project Glasswing uncovered at least 129,000 verified...