Hugging Face hosts 352,000 unsafe model issues. ClawHub's registry contains 341 malicious AI agent skills. The AI supply chain is now the most attractive target in software security.
New research exposes how prompt injection in AI agent frameworks can lead to remote code execution. Learn how these ...
Highlights of Python 3.15, now available in beta, include lazy imports, faster JITs, better error messages, and smarter ...
ZiChatBot malware spread via 3 PyPI packages in July 2025 uses Zulip APIs as C2, enabling stealthy attacks across systems ...
ScarCruft spreads BirdCall via sqgame.net since late 2024, targeting Android users, enabling surveillance and data theft.
ESET researchers have investigated an ongoing attack by the ScarCruft APT group that targets the Yanbian region via ...
A malicious version of the PyTorch Lightning package published on the Python Package Index (PyPI) delivers a ...
The terminal is fine. But if you actually want to live in your Hermes agent, here are the four best GUIs the community has ...
On April 30, 2026, someone slipped credential-stealing malware into two freshly published versions of PyTorch Lightning, one ...
Xiaomi is rolling out Android 17 beta for several smartphones. Check if yours is on the list and the steps to install the ...
Over 1,800 developers were likely infected in the Mini Shai-Hulud supply chain attack that hit SAP, Lightning, and Intercom ...