TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...

Critical out-of-bounds read in Ollama before 0.17.1 leaks process memory including API keys from over 300000 servers via ...

PCPJack steals credentials via 6 Python modules exploiting 5 CVEs, enabling cloud spread and fraud-driven attacks.

In the latest evolution of automated cyberattacks, 2 threat campaigns heavily leveraged AI agents to support attacks against ...

First revealed at NAB 2025, Nuke Stage enables real-time playback of photoreal environments onto LED walls using standard ...

A malicious Hugging Face repository that reached the platform's trending list impersonated OpenAI's "Privacy Filter" project ...

In early May, the JDownloader website delivered malware. This is reminiscent of Daemon Tools, which have since reacted.

Hugging Face hosts 352,000 unsafe model issues. ClawHub's registry contains 341 malicious AI agent skills. The AI supply chain is now the most attractive target in software security.

Whether you want simple fire-and-forget alerts or full two-way control, here's how to securely wire your AI agent into Slack.

A new malware framework called PCPJack is stealing credentials from exposed cloud infrastructure while actively removing ...

AI agents often fail with AWS because their training knowledge is outdated. The MCP server, now generally available, is ...

Because your private information deserves a private LLM to process it.