The undocumented system-level API within the Comet AI browser enables embedded extensions to execute commands and launch applications.

SquareX released critical research exposing a hidden API in Comet that allows extensions in the AI Browser to execute local ...

Researchers say the flaw, affecting thousands of internet-facing FortiWeb instances, was exploited long before Fortinet ...

A critical Fortinet FortiWeb vulnerability capable of remote code execution has been exploited in the wild.

Escape MCP is the bridge between Security and the Developer world. It implements Anthropic's Model Context Protocol (MCP) , ...

Fortinet CVE exploited, China-linked AI attacks exposed, PhaaS platform dismantled, and fake crypto apps deploy RATs. Catch this week’s top threats.

The latest update to open-source desktop email client Thunderbird has a tranche of improvements in tow. Thunderbird 145 now ...

Discover the best anonymous proxy for secure and private browsing. Learn what anonymous proxies are and explore the top five ...

The researchers discovered the intrusion while investigating a Citrix Bleed Two vulnerability which was also being exploited as a zero-day. The newly found bug is now tracked as CVE-2025-20337 and has ...

Researcher uncovers a critical SSRF vulnerability in ChatGPT’s Custom GPT “Actions” feature, risking exposure of internal cloud credentials. Exploit allowed access to Azure Instance Metadata Service, ...

A threat actor was seen exploiting two critical Citrix and Cisco vulnerabilities as zero-days weeks before patches were released ...