According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD ...

Google fixed Rogue Agent, a Dialogflow CX Code Blocks flaw that could let one writable agent affect every chatbot in a Cloud ...

Sysdig says JADEPUFFER may be the first agentic ransomware case, exposing how AI agents can turn old credential failures into database destruction. JADEPUFFER is a warning about exposed AI ...

A threat group researchers call "Armored Likho" has gained access to government agencies and electrical power entities in ...

Armored Likho BusySnake Stealer, a Python-based infostealer first disclosed by Kaspersky, is actively targeting government ...

Smart speakers such as Alexa, Google Home, and Apple Home have transformed how people interact with technology, enabling ...

Mozilla’s 0din team showed how a Claude Code malware GitHub repo attack could use a clean-looking repository to open a ...

Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Python-based information stealer on compromised Windows, Linux, and macOS ...

My AI stopped having goldfish syndrome.

Hackers injected malware into 73 Microsoft GitHub repos on June 5, 2026. The attack targeted AI coding tools like Claude Code and VS Code. Read what happened.

Focused on versatility and modularity, the LiteWing drone can be programmed and controlled using different platforms. When you purchase a LiteWing drone, it ships with default firmware that supports ...

Credential theft fell to 13% of breach vectors in 2026. Attackers now bypass MFA via help desk resets and OAuth token theft. Five attack surfaces mapped.