Hackers are exploiting a critical vulnerability in Marimo reactive Python notebook to deploy a new variant of NKAbuse malware ...

Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...

A single unauthenticated connection gives attackers a full shell; credential theft observed in under three minutes on honeypot servers.

An attacker pushed a malicious version of the popular elementary-data package Python Package Index (PyPI) to steal sensitive ...

A widely used open-source PyPI package, elementary-data, was compromised in a targeted attack that inserted infostealer malware via a GitHub Actions vulnerability. The malicious update, version 0.23.3 ...

This was not a case of stolen credentials, but rather of vulnerability exploitation.

A new report from ReversingLabs identified a new tactic by North Korean hackers: feeding malicious code to the AI systems ...

CVE-2026-5752 CVSS 9.3 flaw in Terrarium enables root code execution via Pyodide prototype traversal, risking container ...

CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server ...

Learn prompt engineering with this practical cheat sheet that covers frameworks, techniques, and tips for producing more ...

Companies are seeing a significant influx of AI-powered phishing, as cyberattackers progress from small campaigns to 1-to-1 ...

The open-source package elementary-data, with over a million downloads per month, has been compromised. Attackers exploited a vulnerability in a GitHub ...