Yubico warns of a search path vulnerability in YubiKey Manager, libfido2 and python-fido2. Updates fix the bugs.

An attacker pushed a malicious version of the popular elementary-data package Python Package Index (PyPI) to steal sensitive ...

People hacking branded AI bots can result in significant reputational, financial, and legal consequences. There appears to be ...

CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server ...

Mistral AI launches Workflows, a Temporal-powered orchestration platform for enterprise AI that automates mission-critical ...

As supply-chain attacks against widely-used, open-source software repositories continue, experts are urging developers to not ...

Anthropic fixed a significant vulnerability in Claude Code's handling of memories, but experts caution that memory files will ...

A widely used open-source PyPI package, elementary-data, was compromised in a targeted attack that inserted infostealer malware via a GitHub Actions vulnerability. The malicious update, version 0.23.3 ...

Learn prompt engineering with this practical cheat sheet that covers frameworks, techniques, and tips for producing more ...

Cybersecurity researchers have discovered a critical "by design" weakness in the Model Context Protocol's (MCP) architecture ...

A design flaw – or expected behavior based on a bad design choice, depending on who is telling the story – baked into ...

Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...