APT29-linked attackers use compromised sites and Plerdy analytics to deliver iOS and Android exploits that steal browser and ...

Hackers from North Korea are notoriously effective at stealing crypto, with one estimate attributing 60% of all losses last ...

A critical remote code execution flaw in OpenCode has been patched. The standard defender toolchain cannot see that. Anomaly, the developer of the open-source AI coding agent that Pillar Security’s ...

Researchers at Sekoia say a hacking group tied to Russia's SVR ran a watering-hole campaign that infected iOS and Android phones through ...

OpenAI on Wednesday detailed a pipeline that employed an upcoming cyber-focused artificial intelligence (AI) model to validate and patch 948 local privilege escalation vulnerabilities in Linux for ...

The numbers behind the trend are blunt. Sonatype’s 2026 State of the Software Supply Chain report counted more than 454,600 new malicious open-source packages in 2025, pushing the cumulative total it ...

OpenClaw's Control UI trusted a gatewayUrl parameter, leaked the stored gateway token, and gave a malicious link remote code ...

From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM, cybersecurity teams have plenty to worry about this week.

AI code review vs SAST: how detection, bug coverage, determinism, false positives, and cost differ, and why combining them ...

Hackers are using Coruna and DarkSword exploit chains across a large web network to compromise vulnerable iPhones without ...

October brought a heavy run of cybersecurity disclosures involving cryptocurrency exchanges, web servers, AI tools, software ...

Volunteer-led PHP, which powers most websites, is increasingly under threat from cyberattacks using AI capabilities.