Drop a file in a folder and have it processed automatically. It feels like magic, but it’s easy to set up—and there’s masses ...

On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — ...

Three Hugging Face Diffusers flaws bypass trust_remote_code, letting crafted model repositories execute code during custom ...

DOUBLECUP hides malware stages in cached PNG files, then uses ClickFix commands to deliver CountLoader variants and the ...

Kimsuky North Korea AI hacking expanded significantly: the spy group built a self-hosted LLM lab inside its own attack ...

At Black Hat USA, Zenity Labs today announced new research detailing an active credential-stealing malicious skills campaign distributed through Vercel's skills.sh. The affected skill family amassed ...

A new Russian loader-as-a-service named DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by ...

Security researcher Kevin Beaumont got a call last week from a major US technology company that insisted it had nothing to worry about: all the credentials stolen in March's LiteLLM supply chain ...

Vulnerabilities can lurk within production code for years or decades — and AI tools have opened a gateway to a glut of new long-hidden discoveries.

Security researchers have disclosed new "Plug and Pwn" attacks that abuse the Windows Plug and Play feature to trigger Windows into installing vulnerable or insecure vendor software and gain SYSTEM ...

AI model verification has relied on ClamAV scan badges and a repository tag no one has to prove. Cisco's new tool grounds lineage in weight-level fingerprinting instead.

Development environments have evolved into toolkits for directing coding models and coordinating agents. GitHub Copilot, ...