The CVSS‑9.3 vulnerability allows unauthenticated remote code execution on exposed Marimo servers and was exploited in the wild shortly after disclosure, Sysdig says.

Marimo CVE-2026-39987 exploited within 10 hours of disclosure, enabling unauthenticated RCE and credential theft, emphasizing urgent patching needs.

Stay ahead of the logs with our Monday Recap. We break down active Adobe 0-days, North Korean crypto stings, and critical CVEs you need to patch today ...

CISA set a deadline of April 11 for federal civilian executive branch agencies to mitigate their environments. Ivanti first ...

A newly discovered vulnerability in Windows 11 is currently drawing attention. The flaw, named “BlueHammer,” allows attackers ...

Apps and platforms allow novice and veteran coders to generate more code more easily, presenting significant quality and ...

Late last month, the industry learned that Anthropic was developing Claude Capybara, also called Mythos, a powerful new AI ...

Now a security researcher says a Reader hole has been quietly exploited by malware for as long as four months, fingerprinting ...

Windows has a zero-day vulnerability that allows attackers to escalate their privileges. A patch is not yet available.

New, more powerful artificial intelligence (AI) models are announced pretty regularly these days: the latest version of ChatGPT or Claude or Gemini always has new features and new capabilities that ...

Hackers have been exploiting an Acrobat Reader vulnerability since December. Opening an infected PDF is all it takes to ...

A closed consortium including tech giants and top security vendors gets early access to a model Anthropic says can ...