In the brief history of AI security, the prompt injection has quickly become the top threat. Large language models are ...

Wix-owned vibe-coding platform Base44 has started rolling out its own AI model — with hopes that it will eventually ...

Microsoft Threat Intelligence identified an active multi-stage intrusion campaign targeting hospitality organizations in ...

Netflix's hidden genre codes bypass the algorithm entirely and drop you straight into whatever category you're actually in the mood for.

This repository contains a Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell. It uses Log4j 2.14.1 (through spring-boot-starter-log4j2 2.6.1) and the JDK 1.8.0_181. [+] ...

Russian cyber-espionage group Turla, aka "Secret Blizzard," is utilizing other threat actors' infrastructure to target Ukrainian military devices connected via Starlink. Microsoft and Lumen recently ...

A phishing campaign was observed predominantly targeting a notable energy company in the US, employing QR codes to slip malicious emails into inboxes and bypass security. Roughly one-third (29%) of ...

If you have issues / suggestions / notes / questions, please open an issue or contact me. Let's create a cool library together.

A developer has been caught adding malicious code to a popular open-source package that wiped files on computers located in Russia and Belarus as part of a protest that has enraged many users and ...