Alessandro Mascellino

More than 40,000 WordPress sites have been exposed to an authentication bypass flaw in the User Profile Builder plugin that can let unauthenticated attackers access the site's administrator account.

Written by A vulnerability in UNISOC modem firmware can allow arbitrary code execution with kernel privileges from the modem context, potentially allowing an attacker to modify Android kernel code.

Written by A critical vulnerability in NASA's open-source AMMOS Instrument Toolkit (AIT)-GUI ground software has been found that could allow

Written by Enterprise applications now carry 4.31 times more critical and high-severity vulnerabilities than before the acceleration of AI-driven software development.

Written by The UK National Cyber Security Centre (NCSC) has urged organizations deploying autonomous AI agents to use sandboxing, human

Written by Two vulnerabilities in JFrog Artifactory have been found which allow anonymous or low-privileged users to manipulate package

Written by AI agents have acted outside their intended scope at 65% of surveyed enterprises, with 29% reporting measurable organizational impact.

Written by Attackers have stolen an API key from AI safety research organization METR and used it for three weeks to consume model credits that would have been worth about $600,000.

Written by A Chinese-speaking cybercrime cluster has turned compromised Brazilian government and education websites into infrastructure for a sustained SEO fraud campaign operating since mid-2025.

Written by A Russian man has been extradited to the US over allegations that he helped distribute malware to approximately 80,000 users of a freelance employment platform between 2016 and 2017.