TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...
Four research teams found the same confused deputy failure in Claude across three surfaces in 48 hours. This audit matrix ...
TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...
Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and ...
The repository reached the #1 trending position on Hugging Face within 18 hours, highlighting how public AI repositories are ...
Whether you want simple fire-and-forget alerts or full two-way control, here's how to securely wire your AI agent into Slack.
A North Korean APT has crafted malicious software packages to appeal to AI coding agents, while ‘slopsquatting’ shows the ...
A malicious Hugging Face repository that reached the platform's trending list impersonated OpenAI's "Privacy Filter" project ...
CollectivIQ, the world's first AI consensus platform for business intelligence, today announced a major expansion of its platform to help companies drive meaningful AI value. The platform ...
The terminal is fine. But if you actually want to live in your Hermes agent, here are the four best GUIs the community has ...
Google says attackers are using AI for zero-day research, malware development, reconnaissance, and access to premium AI tools ...
Google's GTIG identified the first zero-day exploit developed with AI and stopped a mass exploitation event. The report documents state actors using AI for vulnerability research and autonomous ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results