The type confusion bug can lead to V8 sandbox escape and control-flow hijacking of the host process. A critical-severity type ...

Isolated-vm's ExternalCopy type confusion lets sandboxed code corrupt host memory and potentially reach host RCE; fixes are ...

The type confusion vulnerability allows a guest-to-host sandbox escape which can lead to remote code execution ...

Cloudflare Workers Spectre attack research published August 19, 2026 showed JWT token theft at 12 bits per second in live ...

Chrome security update 151.0.7922.169/.170 patches 15 vulnerabilities, including two Critical sandbox-escape buffer overflows ...

OpenAI on Monday announced a new purpose-trained cybersecurity model, GPT-5.6-Cyber, and restructured its Daybreak program into two access tiers — but the most significant part of the announcement was ...

JavaScript Explicit Resource Management lands in Safari Technology Preview 250, completing cross-browser support across V8, ...

We've got good news for developers who are enamored with Cloudflare Workers and Durable Objects but don’t want to be tied into that company’s backend infrastructure. Last week, Node.js creator Ryan ...

OpenAI's cybersecurity incident demonstrates why autonomous AI is changing cyber risk and why verifiable security has become more important than ever.

OpenAI says the model has already helped identify vulnerabilities across Chrome’s V8 engine, databases, mobile operating ...

GPT-5.6-Cyber responded to 95% of advanced cyber requests in an OpenAI refusal-rate test and has been used to uncover previously unknown vulnerabilities in Google’s V8 engine.

Daybreak Red is one of two access tiers set up by OpenAI as part of the Daybreak initiative it introduced back in May 2026, the other being Daybreak Blue, which provides access to frontier ...