Sometime in early 2026, a routine vulnerability scan turned into something far worse for machine learning teams that depend ...

Dubbed Quasar Linux (QLNX), the RAT has a modular architecture, uses multiple persistence and detection evasion mechanisms, ...

Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...

A North Korean APT has crafted malicious software packages to appeal to AI coding agents, while ‘slopsquatting’ shows the ...

New research exposes how prompt injection in AI agent frameworks can lead to remote code execution. Learn how these ...

The Bitwarden security team confirms that a malicious version of the command-line client was briefly distributed.

OpenAI's Codex Desktop can run your computer now - and has its own browser ...

Attackers continue to scale a campaign to seed Open VSX with seemingly benign VS Code extensions that spread self-propagating ...

Trivy is an open source vulnerability scanner maintained by Aqua Security. On March 16, TeamPCP injected credential-stealing ...

Malicious repositories can trigger code execution in Claude Code, Cursor CLI, Gemini CLI, and CoPilot CLI with minimal or no ...

GitHub facades and Ethereum smart contracts power a March 2026 admin-targeted campaign, enabling resilient C2 rotation and ...