Hackers from North Korea are notoriously effective at stealing crypto, with one estimate attributing 60% of all losses last ...
Researchers at Sekoia say a hacking group tied to Russia's SVR ran a watering-hole campaign that infected iOS and Android phones through ...
A critical remote code execution flaw in OpenCode has been patched. The standard defender toolchain cannot see that. Anomaly, the developer of the open-source AI coding agent that Pillar Security’s ...
From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM, cybersecurity teams have plenty to worry about this week.
OpenClaw's Control UI trusted a gatewayUrl parameter, leaked the stored gateway token, and gave a malicious link remote code ...
The numbers behind the trend are blunt. Sonatype’s 2026 State of the Software Supply Chain report counted more than 454,600 new malicious open-source packages in 2025, pushing the cumulative total it ...
October brought a heavy run of cybersecurity disclosures involving cryptocurrency exchanges, web servers, AI tools, software ...
Hackers are using Coruna and DarkSword exploit chains across a large web network to compromise vulnerable iPhones without ...
Volunteer-led PHP, which powers most websites, is increasingly under threat from cyberattacks using AI capabilities.
How OpenAI's AI agents escaped an eval sandbox, built a secret message board, and hacked Hugging Face, plus 8 lessons for teams shipping agents.
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: r/opensource bans AI ...
New research from cloud security firm Wiz reveals that 91% of cloud environments contain resources vulnerable to ...