The design flaw in Flowise’s Custom MCP node has allowed attackers to execute arbitrary JavaScript through unvalidated ...

Hackers are exploiting a maximum-severity vulnerability, tracked as CVE-2025-59528, in the open-source platform Flowise for ...

Nexus Pharmaceuticals, LLC announces the launch of Cyclophosphamide Injection, available in ready to dilute 2.5 mL fill and 5 ...

Threat actors can use malicious web content to set up AI Agent Traps and manipulate, deceive, and exploit visiting autonomous ...

A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...

The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute ...

LEO Pharma Announces New Long-Term Data for SPEVIGO® (spesolimab-sbzo) Injection in Adults with Generalized Pustular Psoriasis at AAD 2026 ...

Claude extension flaw enabled silent prompt injection via XSS and weak allowlist, risking data theft and impersonation until ...

Cisco’s widely deployed Catalyst 9300 Series enterprise switches have four security vulnerabilities, two of which could be chained to cause a denial-of-service outage, infrastructure security company ...

China to inject 300 billion yuan into state banks Beijing launches 100 billion yuan fund to boost domestic demand China to step up tech financing, deepen capital markets "Green channel" to fast-track ...

Chrome’s Gemini panel requires camera and microphone access to function as an AI assistant. That same elevated access, researchers found, could be claimed by any rogue extension, including one with ...