오늘도 GitHub 상위권은 AI 에이전트 관련 분야의 기세가 대단하다. 이번 주는 단순한 모델 구현보다는 '여러 AI를 어떻게 협업시킬 것인가', '기억이나 음성을 어떻게 통합할 것인가', '만든 것을 어떻게 운영할 것인가 ...

Google 위협 인텔리전스 부문(GTIG)이 2026년 9월 9일에 공개한 보고서에 MCP 서버 탈취와 .claude/를 이용한 공급망 공격이 등장합니다. 금전 목적의 공격자가 정식 MCP 서버의 가짜 포크를 배포하고, ...

Oracle’s Fusion Claw turns a company’s policy documents into JavaScript that an AI agent follows to the letter. That keeps ...

Next.js ImageResponse flaw can lead to server code execution when attacker-controlled values reach generated SVG.

Jujutsu Shenanigans on Roblox lets you become one of the strongest characters right out of the JJK animanga series. While we know how the Gojo vs Sukuna fight ended, you have the power to change their ...

The race to build AI agents that can operate a computer has been defined by a single benchmark: can the model beat a human at clicking ...

A critical Next.js flaw could allow remote code execution via the Node.js ImageResponse implementation in next/og.

A group of VS Code theme extensions linked to GlassWorm, a malware campaign targeting developers. Their investigation ...

You don’t need it anymore because VS Code added native bracket pair colorization in version 1.60 and turned it on by default ...

CERT-UA found 100+ compromised sites using ClickFix lures to distribute LunexStealer to Windows search visitors.

GlassWorm hides malware in VS Code theme extensions, targeting developers through Visual Studio Marketplace and Open VSX.

A critical security vulnerability in Next.js can allow remote code execution when applications using the Node.js ...