OpenAI says a rogue agent powered by its technology hacked into the infrastructure of startup Hugging Face, an incident that ...

North Korean hackers hide a four-stage OtterCookie payload in SVG files inside fake coding tests to steal browser data and ...

Google is restricting Gemini 3.5 Flash Cyber to select partners as CodeMender enters preview. Here’s what security teams ...

Russia's Sandworm hacking group is using fake CAPTCHA prompts to infect Ukrainian devices with malware across ten-plus ...

Zimbra zero-click vulnerability CVE-2025-66376 is being actively exploited by Russian hackers targeting NATO governments and defense contractors. Unit 42 and CISA warn that Void Blizzard has raided ...

A flaw in Anthropic's Claude for Chrome browser extension could allow a malicious extension to trigger predefined AI actions ...

Chrome Firefox security update July 2026 delivered emergency patches across five vendors on July 15: Mozilla confirmed public ...

Three malicious RubyGems packages in the SleeperGem attack skip CI runners, target developer machines, and install persistent ...

A cybersecurity researcher poisoned an open weight AI model for under $100 in about an hour, exposing how easily these increasingly popular systems can be secretly compromised without detection.

A new macOS ClickFix campaign is tricking users into running malicious Terminal commands to deploy a persistent backdoor and ...

Artificial intelligence company OpenAI has confirmed that the mystery attacker behind last week's Hugging Face breach was two ...