SonicWall tells customers to patch SonicOS flaw allowing hackers to crash firewalls

A high-severity flaw was found in SonicWall OS SSLVPN which can be used to trigger DoS. [...]

This long-exposed SonicWall flaw is being used to infect organizations with Akira ransomware - so patch now

Multiple versions of SonicWall's SSLVPN firewalls are being targeted. [...]

US government flags worrying SonicWall flaw, so update now

SonicWall updates its security advisory, and CISA added the flaw to KEV. [...]

Mythos autonomously exploited vulnerabilities that survived 27 years of human review. Security teams need a new detection playbook

A 27-year-old bug sat inside OpenBSD’s TCP stack while auditors reviewed the code, fuzzers ran against it, and the operating system earned its reputation as one of the most security-hardened platfor [...]

200,000 MCP servers expose a command execution flaw that Anthropic calls a feature

Anthropic created the Model Context Protocol as the open standard for AI agent-to-tool communication. OpenAI adopted it in March 2025. Google DeepMind followed. Anthropic donated MCP to the Linux Foun [...]

SonicWall VPN flaw could allow hackers to hijack your sessions, so patch now

Security researchers are urging SonicWall users to apply the available fix as soon as possible. [...]

Running Claude Code or Claude in Chrome? Here's the audit matrix for every blind spot your security stack misses

Between May 6 and 7, four security research teams published findings about Anthropic’s Claude that most outlets covered as three separate stories. One involved a water utility in Mexico, another tar [...]

CVSS scored these two Palo Alto CVEs as manageable. Chained, they gave attackers root access to 13,000 devices.

During Operation Lunar Peek in November 2024, attackers gained unauthenticated remote admin access — and eventual root — across more than 13,000 exposed Palo Alto Networks management interfaces. P [...]

7,000 Langflow servers are under attack. LangGraph and LangChain have the same holes

Your AI agent did exactly what it was designed to do. The framework underneath it just handed an attacker a shell on the box that holds your OpenAI key, your database credentials, and your CRM tokens. [...]