Google says hackers used AI to help build a zero-day exploit targeting 2FA, raising concerns about AI-assisted hacking.

Google's GTIG identified the first zero-day exploit developed with AI and stopped a mass exploitation event. The report documents state actors using AI for vulnerability research and autonomous ...

A new wave of the Mini Shai-Hulud campaign compromised dozens of TanStack npm packages as part of a broader supply chain ...

Cybercriminals used an AI model to find and weaponize a previously unknown software flaw, Google's threat team confirmed ...

What happened?: Attackers took over a maintainer account for Axios and published malicious versions to npm, potentially impacting millions of downloads. Why it matters: CSA Singapore warns supply ...

In March 2026, someone hijacked a maintainer account for Axios, a JavaScript HTTP library downloaded more than 45 million ...

Dive into The Register's online archive of incisive tech news reporting, features, and analysis dating back to 1998 ...

Critical cPanel flaw under attack, Copy Fail Linux privilege escalation, TeamPCP supply chain campaign, GitHub RCE & major ...

Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and ...

MENLO PARK, Calif. (KRON) — A Redwood City man was arrested for traveling to Menlo Park with the intent to sexually exploit a child Thursday. The Menlo Park Police Department, with the Sunnyvale ...

Hackers are actively exploiting a critical vulnerability in the Breeze Cache plugin for WordPress that allows uploading arbitrary files on the server without authentication. The security issue is ...

LENA, Ill. (WTVO) — Stateline communities continue to recover from recent storm damage, and residents are being warned about potential scams. Illegitimate individuals are targeting disaster recovery ...