On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — ...

Google has fixed the issues, which exploited a trust boundary between two AI agents with different privileges to potentially ...

DOUBLECUP hides malware stages in cached PNG files, then uses ClickFix commands to deliver CountLoader variants and the ...

According to new research from Blackpoint Cyber's Adversary Pursuit Group (APG), published on July 30, the intrusion hit two ...

Threat-intelligence firm CloudSEK said in a report published August 11, 2026 that it has identified more than 2,500 organizations potentially exposed by the March 2026 supply-chain compromise of ...

Three Hugging Face Diffusers flaws bypass trust_remote_code, letting crafted model repositories execute code during custom ...

Every Data Team Eventually Ends Up with a Collection of Python Scripts. Almost every enterprise data platform follows a similar evolution. At the beginning of a project, data inge ...

AI agent tool bypass vulnerability CoreBreak exposed production agent infrastructure at AWS, Google, and Vercel, where attackers could invoke tools without any model turn. AWS fixed its managed ...

A study of more than 6,000 patches found that even working patches can introduce new bugs, break something else, or are open ...

A new Russian loader-as-a-service named DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by ...

Baghshetsyan: It’s impossible to imagine a future that does not have data science embedded in our daily lives. Let’s start teaching it.