For more than a year, a self-propagating worm rode VS Code extensions, npm packages, and stolen developer credentials through ...
CrowdStrike, alongside Google and the Shadowserver Foundation, has disrupted the Glassworm botnet used to spread malware ...
CrowdStrike, Google and the Shadowserver Foundation worked together to take down a botnet that poisoned over 300 GitHub ...
Researchers who found the bug warn that its Moderate rating understates a threat reaching across LLM gateways, MCP servers ...
Millions of AI agents and tools around the world have been imperiled by a critical vulnerability that can allow hackers to ...
Open source robotics AI platform LeRobot surpassed 58,000 community datasets in 2026 — 50x growth in under a year — making it the largest dataset category on Hugging Face and signaling a ...
TrapDoor spread 34 malicious packages across npm, PyPI, and Crates.io, stealing developer credentials and enabling persistence.
V2X2MAP is an open-source receiver and live map for ITS-G5 / V2X traffic working with ESP32-C5 board over 5.9 GHz WiFi.
A GitHub employee installed a routine VS Code extension update, handed cybercrime group TeamPCP enough access to exfiltrate ...
Solidity remains the dominant smart contract language for Ethereum and EVM-compatible chains, with the 2025 developer survey collecting responses from developers across eighty-seven different ...
Anthropic says its cybersecurity initiative Project Glasswing has helped uncover more than 10,000 high- and critical-severity ...
GitLab 19.0 extends agentic AI across the full development lifecycle with SBOM dependency scanning, Claude Opus 4.7 support, and credit-based agent pricing.