Your weekly cybersecurity roundup covering the latest threats, exploits, vulnerabilities, and security news you need to know.

In this interview, law professor Corinna Barrett Lain discusses her book “Secrets of the Killing State,” which exposes the troubling realities behind lethal injection as a method of execution. Lain, a ...

Pfizer said its experimental obesity drug, which it acquired through Metsera, drove solid weight loss when taken once a month in a mid-stage trial. The data offer early evidence that the injection can ...

More than 40,000 WordPress sites using the Quiz and Survey Master plugin have been affected by a SQL injection vulnerability that allowed authenticated users to interfere with database queries. The ...

Clawdbot's MCP implementation has no mandatory authentication, allows prompt injection, and grants shell access by design. Monday's VentureBeat article documented these architectural flaws. By ...

Technical details and a public exploit have been published for a critical vulnerability affecting Fortinet's Security Information and Event Management (SIEM) solution that could be leveraged by a ...

Threat actors are using complex trickery in their phishing attacks to make email recipients believe a message was sent from within the organization. That's according to Microsoft Threat Intelligence, ...

A protocol-level flaw allowed assets to be duplicated rather than minted, prompting a network halt and a governance-led recovery process. The Flow Foundation on Tuesday published a technical post ...

You know the drill by now. You're sitting in the purgatory of the service center waiting room. Precisely 63 minutes into your wait, the service adviser walks out with a clipboard and calls your name — ...

The UK’s National Cyber Security Centre (NCSC) has highlighted a potentially dangerous misunderstanding surrounding emergent prompt injection attacks against generative artificial intelligence (GenAI) ...

Researchers uncover a second-order prompt injection exploit in ServiceNow’s Now Assist AI agents caused by risky default configurations. Attackers can manipulate agent-to-agent collaboration to steal ...