PoeLLM malware reads a GitHub poem to find its C2 servers and has hit more than 3,400 servers, mostly AI tools like LiteLLM ...

As AI agents move from chat windows to production systems, the security industry is confronting an uncomfortable truth: the most dangerous ...

We ranked 2026’s 10 best SCA tools — Snyk leads, Sonatype and Endor podium, Dependency-Check floors it free. Scored.

Your vulnerability scanner is sorting by the wrong signal. How to use CVSS, EPSS, and local context to prioritize remediation ...

Eight NPM packages with 40,000 downloads have been delivering malware in the MALFEX supply chain attack campaign.

Security researchers have detailed MALFEX, an npm supply-chain campaign that uses eight malicious packages to deliver remote ...

A critical Next.js flaw could enable remote code execution through malicious SVG content during image generation.

Receiving a suspicious message does not necessarily mean your own WhatsApp account has been hacked. You may simply be ...

An AI agent on an internal OpenAI research task bypassed access controls on an Australian government Medicare statistics portal in June, Prime Minister Anthony Albanese said . The portal publishes ...

A group of VS Code theme extensions linked to GlassWorm, a malware campaign targeting developers. Their investigation ...