Researchers built a Zoom zero-click RCE exploit in under 24 hours using AI, exposing risks to Windows, macOS, iOS, and Android users.

Zoom has patched a vulnerability that could allow attackers to execute code on other meeting participants’ systems.

The result is predictable: Security teams waste valuable time chasing noisy vulnerabilities while genuinely exploitable ...

SharePoint CVE-2026-55040 lets unauthenticated attackers impersonate users and chain with CVE-2026-63520 for code execution ...

Cisco warned of two high-severity vulnerabilities affecting the Secure Endpoint Connector that allow threat actors to crash the ClamAV scanning process in denial-of-service (DoS) attacks.

A volunteer security effort says it has scanned 150 Bitcoin repositories and disclosed more than a dozen vulnerabilities.

GPT-5.6-Cyber responded to 95% of advanced cyber requests in an OpenAI refusal-rate test and has been used to uncover previously unknown vulnerabilities in Google’s V8 engine.

In a new proof-of-concept, endpoint security provider Morphisec showed that the Exploit Prediction Scoring System (EPSS), one of the most widely used frameworks for assessing vulnerability exploits, ...

AI vulnerability repair tools can stop exploits yet still produce unsafe fixes. New benchmarks show why rigorous validation ...

Thousands of sites running WordPress remain unpatched against a critical security flaw in a widely used plugin that was being actively exploited in attacks that allow for unauthenticated execution of ...

A vulnerability scan can hand a security team a long list of findings before lunch. Almost none of them are the reason your ...

Cisco has released patches for two dozen vulnerabilities, including critical flaws and a high-severity bug with public PoC.