A high-severity Telegram Desktop flaw allowed malicious JavaScript in bot-created buttons to steal chat content when conversations were exported as HTML.

Telegram Desktop fixed a flaw that let bot messages embed JavaScript in HTML exports to read or alter messages; old exports ...

AI-assisted coding can generate, explain and debug code. Learn how AI coding assistants work, which tools to consider and how ...

China-linked UNC3569 exploited a Sogou Input Method flaw to deploy GRAYRABBIT; Tencent fixed the issue in version 16.3.0.3498 ...

Cyber extortion group FulcrumSec continues to find hardcoded credentials in public-facing IT infrastructure and exploit them as part of what it's dubbed a ...

A few days ago I saw a screenshot on X of someone talking to what looks like a McDonald's support chatbot.They wanted to ...

Critical ArangoDB flaws let attackers bypass authentication, access data, and gain root-level code execution on vulnerable hosts.

Chrome zero-day CVE-2026-87491 is under active attack. See what the V8 flaw can do, why the sandbox matters, and which Chrome ...

Cisco Talos has uncovered a cryptocurrency theft campaign that abuses Google Sheets and the Google Visualization API as a ...

Engineer Tetsuya Wakita built vault-mcp, an open-source system that stores personal AI context in a user-owned Git repo and ...