Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...

Anthropic fixed a significant vulnerability in Claude Code's handling of memories, but experts caution that memory files will ...

CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server ...

An attacker pushed a malicious version of the popular elementary-data package Python Package Index (PyPI) to steal sensitive ...

This was not a case of stolen credentials, but rather of vulnerability exploitation.

As unloved as IBM’s PCjr was, with only a one-year production run, it’s hard to complain about the documentation available ...

Anthropic released nine new Claude connectors on April 28, plugging the assistant directly into the software professional creatives already use — Adobe Creative Cloud, Blender, Ableton Live, Autodesk ...

Open WebUI has been getting some great updates, and it's a lot better than ChatGPT's web interface at this point.

A single unauthenticated connection gives attackers a full shell; credential theft observed in under three minutes on honeypot servers.

As supply-chain attacks against widely-used, open-source software repositories continue, experts are urging developers to not ...

A new report from ReversingLabs identified a new tactic by North Korean hackers: feeding malicious code to the AI systems ...

CVE-2026-5752 CVSS 9.3 flaw in Terrarium enables root code execution via Pyodide prototype traversal, risking container ...