Threat actors have started exploiting CVE-2025-59528, a critical Flowise vulnerability leading to remote code execution.

The design flaw in Flowise’s Custom MCP node has allowed attackers to execute arbitrary JavaScript through unvalidated ...

The Internet Bug Bounty program has paused new submissions, citing a massive expansion in vulnerability discovery by AI code ...