On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — ...
At Black Hat USA, Zenity Labs today announced new research detailing an active credential-stealing malicious skills campaign distributed through Vercel's skills.sh. The affected skill family amassed ...
Nearly 800 malicious npm packages deliver a cross-platform RAT and infostealer, using WEL1DROPPER to target Windows, macOS, ...
Dependency confusion is a supply chain issue that affects how package managers choose where to download a dependency from. If your build or developer tooling can see both a private package registry ...
Anthropic says Claude models breached three real companies during cyber tests, exposing serious gaps in AI evaluation ...
OpenAI and Anthropic's July AI agent breaches revive Nick Bostrom's paperclip maximizer thought experiment and instrumental ...
Malicious npm packages impersonate Alibaba tools to deliver a cross-platform RAT with command execution, persistence, and ...
Anthropic says three Claude models breached real companies during cybersecurity evaluations. Ordinary weaknesses, chained ...
Typst is an easy and powerful markup-based language for creating technical documentation and books – and a compelling ...
Meta AI cybersecurity evaluation breach confirmed: Muse Spark 1.1 hacked an unnamed company during testing through the same ...
Hollowframe Masks Malware Behind Trusted Python Files Arabian Post. clearfix>A newly identified malware operation has used a counterfeit Python component to bypass security scrutiny, disable parts of ...
As AI agents gain autonomy inside enterprises, the biggest cybersecurity threat may no longer be hackers, but the agents ...