Open WebUI, an open-source, self-hosted web interface for interacting with local or remote AI language models, carried a high ...

The bug allows attacker-controlled model servers to inject code, steal session tokens, and, in some cases, escalate to remote ...

The CISA KEV catalog was expanded with 245 vulnerabilities in 2025, including 24 flaws exploited by ransomware groups.

A new report out today from cybersecurity company Securonix Inc. is warning of an ongoing malware campaign targeting the ...

Singapore’s CSA warns of a CVSS 10.0 SmarterMail vulnerability allowing unauthenticated remote code execution via file upload ...

The explosive, easy-to-trigger vulnerability was exploited within hours of disclosure, exposing the risks of default ...

Critical n8n flaw CVE-2025-68613 (CVSS 9.9) lets authenticated users run arbitrary code; versions 0.211.0–1.120.4 affected, ...

A federal judge declined to halt the Dec. 17 execution of Stacey Humphreys, convicted of killing two real estate agents in 2003. Humphreys argued a COVID-era agreement delaying some executions should ...

A Florida death row inmate convicted of murdering Tressa Pettibone during a home invasion in 1989 was executed on Tuesday. Mark Allen Geralds, 58, was given a three-drug injection at the Florida State ...

Microsoft says Windows PowerShell now warns when running scripts that use the Invoke-WebRequest cmdlet to download web content, aiming to prevent potentially risky code from executing. As Microsoft ...

OpenAI CEO Sam Altman declared a "code red" effort within his company to improve the quality of ChatGPT, The Wall Street Journal reported, citing an internal memo. In the document, Altman said OpenAI ...