TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...
Four research teams found the same confused deputy failure in Claude across three surfaces in 48 hours. This audit matrix ...
OpenAI says malware tied to the Shai-Hulud supply chain attack accessed internal repositories after infecting two employee ...
The vulnerability in question is CVE-2026-44338 (CVSS score: 7.3), a case of missing authentication that exposes sensitive ...
Google says attackers are using AI for zero-day research, malware development, reconnaissance, and access to premium AI tools ...
Security researchers have uncovered covert infostealer malware hidden in one of the top-ranking repositories on Hugging Face, ...
Who won?: Gemini 3.1 Pro claimed first place in a multi-AI Python debugging challenge, outperforming ChatGPT and Claude. What ...
Google's GTIG identified the first zero-day exploit developed with AI and stopped a mass exploitation event. The report documents state actors using AI for vulnerability research and autonomous ...
In the US, fired and laid-off workers often have their digital credentials deactivated before they learn about the loss of ...
On May 11, the same day Google's Threat Intelligence Group disclosed the first confirmed case of attackers using AI to build ...