Vulnerability

Google Gemini Prompt Injection Flaw Let Malicious Calendar Invites Expose Private Meeting Data and Create Deceptive Events

Researchers showed a Gemini prompt injection via Calendar invites that bypassed privacy controls and...

Critical Node.js async_hooks flaw enables unrecoverable server crashes (CVE-2025-59466)

CVE-2025-59466 can crash Node.js apps when async_hooks is enabled. A stack overflow in async hook ca...

Microsoft January 2026 Patch Tuesday: 3 Zero-Days, 114 Fixes, and a Secure Boot Deadline You Cannot Ignore

ShadowLeak and ZombieAgent: Critical ChatGPT Flaws Enable Zero-Click Data Exfiltration from Gmail, Outlook, and GitHub

Security researchers have disclosed critical vulnerabilities in ChatGPT that allowed attackers to si...

Cisco ISE XXE Vulnerability Exposes Sensitive Files to Authenticated Attackers After Public PoC Release

Cisco has patched a medium-severity XML External Entity (XXE) vulnerability in Identity Services Eng...