A malicious Ruby gem steals developer credentials, plants AI tool backdoors, and can delete victims' home folders.

To use AI agents safely, it is important to manage three things: 'where you run them,' 'what you let them read,' and 'how ...

When building AI agents, it doesn't end with just "making the LLM think." You eventually want to execute some kind of program ...

Google has released Chrome 157 for Windows, macOS, and Linux, addressing 83 security flaws, including five critical use-after ...

A planted AGENTS.md file tricked OpenAI’s Codex into installing malware, exposing a risk for AI coding agents that act on local files.

A malicious RubyGems package that steals developer credentials during installation and includes a mechanism capable of ...

The AI company acknowledged his report as a valid vulnerability in May, but closed the security issue as a duplicate of a ...

In an experiment by YC Labs and Olam Labs, 50 AI agents in Minecraft piled up formal permit procedures while failing to ...

PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497 , a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt ...

Anthropic says Claude chained software flaws into working exploits, highlighting the growing role of AI in vulnerability research and cybersecurity risks ...

Factory has released Droid 1.0, a major upgrade to its AI coding-agent platform designed to make autonomous software development faster, more efficient and less dependent on any single artificial inte ...

PHP2Shell exploits, a bulletproof host shot and an Oracle flaw. Ukrainian man imprisoned for ransomware, AfD breach, Ukraine warned about Dahua cameras, ...