Researchers have uncovered a supply-chain attack that hides in Python packages, propagates like a worm, and tricks LLM-based ...

Meta’s Rust-powered linter and type checker for Python pairs blazing speed with advanced and innovative features.

AI agent exploited Salesforce sites; 263 objects, 55 Apex methods exposed at one portal, leading to PII and file leaks.

A threat actor is using an AI-built ransomware attack toolkit that automates Active Directory discovery and helps evade ...

Hackers compromised 19 packages on the PyPI, collectively downloaded hundreds of thousands of times, in a new Shai-Hulud ...

Cybersecurity researchers create a five-step exploit chain using over-permissioned roles, secrets discovery, and NHIs to attack a popular low-code service.

As the COOs from both Uber and Microsoft recently learned, encouraging company engineers to use AI aggressively can lead to ...

GitHub confirmed attackers stole 3,800 internal repositories via a poisoned VS Code extension. The same threat group, TeamPCP, simultaneously compromised Microsoft's durabletask Python ...

A report by Israel-based Gambit Security dismisses the hackers’ claims of being patriotic but unaffiliated activists.

I connected Open WebUI to my local LLMs, AI tools, and MCP servers, and my setup finally feels finished ...

AID, launched under the Linux Foundation, lets AI agents find each other through existing DNS infrastructure using SVCB ...

Four research teams found the same confused deputy failure in Claude across three surfaces in 48 hours. This audit matrix maps every blind spot and fix.