An attacker pushed a malicious version of the popular elementary-data package Python Package Index (PyPI) to steal sensitive ...

Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...

This was not a case of stolen credentials, but rather of vulnerability exploitation.

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver remote access trojans to Linux, Windows, and macOS systems. One malicious ...

The open-source package elementary-data, with over a million downloads per month, has been compromised. Attackers exploited a vulnerability in a GitHub ...

CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server ...

Anaconda, an infrastructure provider for the Python community, has released Anaconda Desktop in public beta, designed for AI ...

The new family of AI models can run on a smartphone, a Raspberry Pi, or a data centre, and is free to use commercially.

When Nandakishore Leburu was building LLM applications at LinkedIn, he learned that the models weren't the problem. The ...

A new report from ReversingLabs identified a new tactic by North Korean hackers: feeding malicious code to the AI systems ...

Cybersecurity researchers have discovered a critical "by design" weakness in the Model Context Protocol's (MCP) architecture ...