More than 1000 ComfyUI servers are exposed to the internet. Attackers exploit misconfigurations to add instances to a botnet.

A Python package presented as a privacy-first shortcut to AI models has been unmasked as a supply-chain threat that quietly captures user prompts, leans on a private university service without ...

Infosecurity outlines key recommendations for CISOs and security teams to implement safeguards for AI-assisted coding ...

An incident of LinkedIn malware means jobseekers and employers need to take more care with their applications and ...

A critical supply chain attack has compromised the popular JavaScript library axios, leading to developers unknowingly ...

Axios 1.14.1 and 0.30.4 injected malicious [email protected] after npm compromise on March 31, 2026, deploying ...

He also foresaw that the global victory of American-style capitalism in the Cold War was not the “end of history,” but contained the seeds of a coming global crisis, notably in the form of worsening ...

A newly documented BlankGrabber infection chain is using a bogus “certificate” loader to disguise a multi-stage Windows compromise, adding another layer of deception to a commodity stealer already ...

A newly discovered attack sandbags Apple users into hacking themselves. Here’s what all Mac users need to know.

A 12th-grade student in Thanh Hoa Province has been accused of developing malicious software and selling it to cybercrime syndicates, enabling them to allegedly hijack over 94,000 computers globally.

Learn how to detect compromise, assess your exposure to the LiteLLM supply chain attack, and use GitGuardian to orchestrate rapid incident response and secret remediation.

On the morning of March 24, 2026, tens of thousands of software developers working on AI applications were unknowingly exposed to malware.