TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...

TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...

Fake OpenAI Privacy Filter hit #1 on Hugging Face with 244,000 downloads, spreading infostealer malware to Windows users.

Google says attackers are using AI for zero-day research, malware development, reconnaissance, and access to premium AI tools ...

Google's GTIG identified the first zero-day exploit developed with AI and stopped a mass exploitation event. The report documents state actors using AI for vulnerability research and autonomous ...

OX Security confirmed arbitrary command execution on six live platforms and estimates 200,000 MCP servers are exposed. Here's ...

I started this as a side project, but my Windows Command Center suddenly became useful.

I stopped manually cleaning spreadsheets after Claude did it in minutes, and it's what it does better than any other AI.

ESET researchers have investigated an ongoing attack by the ScarCruft APT group that targets the Yanbian region via ...

With model devs pushing more aggressive rate limits, raising prices, or even abandoning subscriptions for usage-based pricing ...

Structured data capture in Revvity Signals One turns lab data into searchable, auditable records for real-time analytics and ...

A fake repository mimicking OpenAI’s Privacy Filter on Hugging Face accumulated ~244,000 downloads before being removed. It delivered a multi-stage Rust infostealer ...