The smartest way to use AI may not be letting it touch your files, but asking it to write software that handles them safely - ...

A flaw in Hugging Face Transformers could allow malicious AI models to execute code, exposing credentials and highlighting AI ...

With over 2.2 billion installs, the flawed Python package offers attackers a huge blast radius, including silent access to ...

A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and ...

Programmable, non-custodial onchain routing for Solana. 2,800+ live transfers. Revenue positive. Top 3 at Visa’s track, ...

When you're ready to start your first chat, click or tap New chat, type your prompt in the composer, and press Enter or tap ...

A flaw in Claude Code's GitHub Action let attackers bypass permission checks via fake bots and steal OIDC tokens through prompt injection.

The ZCash team hired a hacker to find an exploit in the ZCash protocol, and he exposed a glitch that has been out there for ...

A VS Code vulnerability in GitHub.dev lets attackers steal full GitHub OAuth tokens via a single malicious link, exposing all private repositories.

Walmart's viral Code Puppy AI tool helps avoid vendor lock-in, cut costs, and reduce dependence on Claude Code and Codex.

A threat actor is using an AI-built ransomware attack toolkit that automates Active Directory discovery and helps evade ...