The CVSS‑9.3 vulnerability allows unauthenticated remote code execution on exposed Marimo servers and was exploited in the wild shortly after disclosure, Sysdig says.

Hackers are exploiting a critical vulnerability in Marimo reactive Python notebook to deploy a new variant of NKAbuse malware ...

A critical pre-authentication remote code execution (RCE) vulnerability in Marimo is now under active exploitation, leveraged ...

Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...

How mature is your AI agent security? VentureBeat's survey of 108 enterprises maps the gap between monitoring and isolation — ...

Nine Mexican government agencies targeted by a single attacker with two AI tools.

Hackers are dodging Windows security tools by running secret Linux virtual machines with QEMU, an open-source virtualizer.

A wave of crypto hacks and attacks followed the Drift exploit, hitting at least 12 entities, including Rhea Finance and Grinex, this week.

Shadow AI 2.0 isn’t a hypothetical future, it’s a predictable consequence of fast hardware, easy distribution, and developer ...

Claude Mythos represents a new generation of AI models that can conduct autonomous attacks more effectively than ever before.

A critical Nginx UI vulnerability that allows attackers to take full control of servers has been exploited in the wild.

Modality-agnostic decoders leverage modality-invariant representations in human subjects' brain activity to predict stimuli irrespective of their modality (image, text, mental imagery).