Google's Agent Development Kit for Java reached 1.0, introducing integrations with new external tools, a new app and plugin ...

Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...

Google launches AI agent suite at Cloud Next 2026 with Workspace Studio, A2A protocol at 150 orgs, and Project Mariner. The pitch: only Google owns the full stack.

A design flaw – or expected behavior based on a bad design choice, depending on who is telling the story – baked into ...

A design choice in the MCP SDKs allows remote code execution across the AI supply chain.

The 9.1-CVSS vulnerability enables attackers to circumvent RCE protections in the de facto template engine for the Java ...

Lovable's API exposed source code and database credentials for 48 days after the company closed a bug report. Up to 62% of AI ...

What actually matters in AI right now? It’s getting harder to tell amid the constant launches, hype, and warnings. To cut ...

Joint solution closes the software supply chain trust gap with secure-by-default artifacts for engineering teams building ...

Rather than presenting a stripped-down proof of concept, Motii has published a complete, buildable system. The Aeris-10 ...

The Bitwarden CLI was briefly compromised after attackers uploaded a malicious @bitwarden/cli package to npm containing a credential-stealing payload capable of spreading to other projects.