January 2026 was a wake-up month for enterprise security teams. In a single week, CERT-In released three high-severity ...

The indirect prompt injection vulnerability allows an attacker to weaponize Google invites to circumvent privacy controls and ...

Researchers found an indirect prompt injection flaw in Google Gemini that bypassed Calendar privacy controls and exposed ...

F5's Guardrails blocks prompts that attempt jailbreaks or injection attacks, and its AI Red Team automates vulnerability ...

Anthropic has launched Cowork with a known data exfiltration vulnerability that researchers reported in October 2025 but ...

Vulnerability scanners now prioritize real attack paths over low-impact alertsCloud and application security require scanners that adapt to const ...

The latest update from Microsoft deals with 112 flaws, including eight the company rated critical — and three zero-day ...

A vulnerability in the AIOSEO plugin affecting up to 3 million installations adds to the six vulnerabilities found in 2025.

Fortinet released updates for FortiOS and other products on Wednesday night. They fix, in some cases critical, ...

SAP addresses 17 security vulnerabilities on January Patchday. Four of them are considered critical security risks.

The best defense against prompt injection and other AI attacks is to do some basic engineering, test more, and not rely on AI to protect you. If you want to know what is actually happening in ...

Fortinet has uncovered a bug in its FortiWeb firewall offering, the second issue to be reported with the product in a month. First reported by The Register, the vulnerability (CVE-2025-58034) could ...