Malicious LiteLLM PyPI releases stole cloud and SSH keys, Kubernetes tokens, and other secrets, potentially exposing 2,500+ ...

On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — ...

Nearly 800 malicious npm packages deliver a cross-platform RAT and infostealer, using WEL1DROPPER to target Windows, macOS, ...

Vulnerabilities can lurk within production code for years or decades — and AI tools have opened a gateway to a glut of new long-hidden discoveries.

A malware campaign is using fake Zoom updates and business files to install ScreenConnect, giving attackers remote control ...

Discover the best open-source vulnerability scanners of 2026 that help CIOs minimize security costs while ensuring robust protection against software vulnerabilities. Learn about their features and ...

Open source software helps developers build applications faster, but every dependency can introduce security risks. In this ...

OpenAI and Anthropic's July AI agent breaches revive Nick Bostrom's paperclip maximizer thought experiment and instrumental ...

Microsoft's July release adds a Copilot Chat agent preview, workload-specific skills, shared instructions, branch context and C++ build controls.

I installed over 100 Claude Code plugins so you don't have to. Here's the signal from the noise.

OpenAI and Anthropic's models have been attacking companies around the world.