Alibaba ordered employees to remove Anthropic's Claude Code after citing suspected backdoor risks, escalating U.S.-China AI tensions.

Attackers exploited Langflow vulnerability CVE-2025-3248 to conduct an agentic AI-powered ransomware attack involving reconnaissance, credential theft, and lateral movement.

GitHub secret scanning now extends beyond org-owned repositories: Public Monitoring scans all of GitHub.com in real time, ...

OpenAI API costs can spiral when agents run wild. Here's how to set spend limits, enable hard caps, and avoid surprise AI ...

CVE-2026-12957 in Amazon Q is the third MCP auto-execution vulnerability in three AI coding tools. The pattern reveals a ...

Mozilla researchers revealed a new attack that tricks Claude Code into running hidden commands from seemingly harmless GitHub repositories.

DeepSeek speculative decoding framework DSpark went live June 27 on V4-Flash and V4-Pro, reporting up to 85 percent faster ...

AI API Gateway that connects developers to more than 200 AI models through a single OpenAI-compatible endpoint. The platform ...

Backstage solved the portal problem, not the platform problem. A portal organizes catalogs, documentation, and templates. A ...

Anthropic’s Fable and Mythos models have been withdrawn following US export controls, but OpenRouter might have a solution. The company has launched Fusion, a compound model API that fans a prompt out ...

Update 6/10/26: Added details below from a new ServiceNow advisory regarding the observed activity and bug bounty submissions. ServiceNow is warning about a security incident after attackers exploited ...

Cisco has rolled out updates for a maximum-severity security flaw impacting Secure Workload that could allow an unauthenticated, remote attacker to access sensitive data. Tracked as CVE-2026-20223 ...