Archive
Security firm Wordfence disclosed critical vulnerabilities in two widely used WordPress plugins that allow unauthenticated remote code execution. The security bugs are currently undergoing active exploitation in the wild.
The practice of relying on AI models to generate code—known as vibe coding—is accelerating across software development, sparking concerns over codebase security and entry-level engineering jobs.
Google has issued a security update for Chrome addressing 12 vulnerabilities, including a zero-day flaw in its V8 JavaScript engine currently being leveraged in real-world cyberattacks.
Google has issued a security update for its Chrome browser across Windows, Mac, and Linux to address 12 vulnerabilities, including a high-severity zero-day flaw in the V8 JavaScript engine currently under active exploitation.
A severe remote code execution vulnerability in Ruby on Rails 8 was targeted by unauthorized probes hours after code fixes were published, illustrating the growing futility of vulnerability disclosure embargoes in open-source software.
OpenAI has started deploying GPT-6 Astra, its most capable artificial intelligence model to date, following internal delays caused by the system's advanced cybersecurity features.
Google has debuted Gemini 3.8 Flash, featuring enhanced agentic reasoning and iterative tool capabilities alongside specialized cybersecurity deployments for government partners.
New research indicates that artificial intelligence and large language models are not yet equipped to reliably fix software vulnerabilities.
Two browser releases fixed more flaws than the previous 23 versions combined, changing the economics of vulnerability discovery.
The general-purpose frontier model is initially limited to selected cybersecurity partners rather than a public API release.
