Four research teams found the same confused deputy failure in Claude across three surfaces in 48 hours. This audit matrix ...

TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...

Fake OpenAI Privacy Filter hit #1 on Hugging Face with 244,000 downloads, spreading infostealer malware to Windows users.

Whether you want simple fire-and-forget alerts or full two-way control, here's how to securely wire your AI agent into Slack.

The repository reached the #1 trending position on Hugging Face within 18 hours, highlighting how public AI repositories are ...

A North Korean APT has crafted malicious software packages to appeal to AI coding agents, while ‘slopsquatting’ shows the ...

Google says attackers are using AI for zero-day research, malware development, reconnaissance, and access to premium AI tools ...

OX Security confirmed arbitrary command execution on six live platforms and estimates 200,000 MCP servers are exposed. Here's ...

Google's GTIG identified the first zero-day exploit developed with AI and stopped a mass exploitation event. The report documents state actors using AI for vulnerability research and autonomous ...

I started this as a side project, but my Windows Command Center suddenly became useful.

A 6MB editor quietly replacing tools that cost ten times more.

With model devs pushing more aggressive rate limits, raising prices, or even abandoning subscriptions for usage-based pricing ...