A security researcher published findings today showing that roughly 10,000 GitHub repositories have been quietly delivering Trojan malware to developers for over a year — some for considerably longer ...

Scammers armed with cheap, widely available AI voice-cloning tools are now impersonating senior U.S. government officials, corporate executives, and ordinary family members in an active campaign that ...

Scammers armed with artificial intelligence can now clone a grandchild’s voice from a short social media clip and place a ...

Researchers warn malicious GitHub repositories can trick AI coding agents into running hidden malware through trusted setup steps, risking developer systems and credentials. Google - Gemini A newly ...

North Korea-linked hackers have upgraded the InvisibleFerret malware to bypass script-based security tools, converting its Python code into compiled modules that are harder for defenders to inspect ...

Researchers at firmware security firm Binarly have found six new flaws in U-Boot, the small program that starts up hardware as varied as home routers, smart cameras, and the management chips inside ...

In the brief history of AI security, the prompt injection has quickly become the top threat. Large language models are ...

Researchers at the AI Now Institute developed a proof-of-concept exploit showing common AI tools used for security could ...

Linux kernel privilege escalation exploit DirtyClone (CVE-2026-43503) is publicly documented: JFrog published a working attack walkthrough Thursday showing how any local user can gain root on ...

CVE-2026-43503 DirtyClone is the fourth DirtyFrag-family privilege escalation in six weeks. JFrog's public PoC raises the ...

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

A newly-disclosed exploit in Claude Code’s ‘auto-mode’ leaves developers facing remote code execution (RCE) vulnerabilities ...