Hackers now exploit critical Roundcube flaw in code injection attacks

A high-severity Roundcube Webmail vulnerability patched in May is now being actively exploited in attacks, according to the Canadian Centre for Cyber Security.

Can your PC be hijacked just by having an AI read a webpage? The new attack surface of AI agents where 'mere text' turns into RCE

"Ignore all previous instructions."If you have ever used generative AI, you might have seen a sentence like this at least once.This is what is known as "prompt injection."Hearing just this, you might ...

AI checks for vulnerabilities when you submit a PR? GitHub 'AI Scan' now runs without CodeQL configuration

On September 16, 2026, GitHub made its AI-powered Security Scan significantly easier to use.GitHub's 'AI Scan' is a feature that analyzes changes in a Pull Request (PR) using AI to identify security ...
Unite.AI

What Is Prompt Injection? The Security Flaw Every AI User Should Understand

Prompt injection is an attack or failure mode in which untrusted content changes an AI system's behavior by supplying ...
InfoQ

Alibaba Open Sources OpenCodeReview for AI-Assisted Code Review

Alibaba recently open-sourced OpenCodeReview, an AI-powered code review CLI that combines deterministic pipelines for file ...
cyberpress

North Korean WaterPlum Hackers Infect 30,000 Devices via Fake Job Interviews to Steal Crypto

North Korean threat actors, tracked as WaterPlum (also known as Contagious Interview), have compromised at least 30,000 ...