Three Ghostscript flaws let attackers run commands on servers that process uploaded PDFs through web services.

Microsoft fixes a record 1,411 vulnerabilities in October 2026 Patch Tuesday, including 3 zero-days and 70 critical security ...

Microsoft patched a record 1,413 flaws, including an exploited Windows Shell bug that can bypass Mark of the Web defenses.

An AI coding agent can write a useful fix and still create a security incident along the way. It may install a compromised ...

Microsoft has patched an actively exploited Windows Shell zero-day vulnerability that allows attackers to bypass Mark of the ...

As we progress further into the AI-driven "vulnpocalypse era," Microsoft’s October 2026 Patch Tuesday security update blows ...

The security vendor said it initially discovered a portion of the defect during internal security checks in June, but the ...

GitLab is urging users of self-managed instances to patch a critical vulnerability (CVE-2026-97229) in its CI/CD Regular ...

Ivanti has patched CVE-2026-104935, a Connect Secure (ICS) zero-day exploit that allows unauthenticated remote code execution ...

A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could ...

The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge.

When attackers exploit AI-identified flaws, attacks are disproportionately likely to result in remote code execution. Learn ...