A security researcher uncovered an exposed online database that was stockpiling user information likely collected via malware ...

This “dream wish list for criminals” includes millions of Gmail, Facebook, banking logins, and more. The researcher who discovered it suspects they were collected using infostealing malware.

本项目为开源项目DIFY源码注释与解析（源码链接），以帮助更多的同学学习和理解DIFY源码，以便更快地进行二次开发和优化 ...

High-severity flaws in the Chainlit AI framework could allow attackers to steal files, leak API keys & perform SSRF attacks; ...

North Korean hackers abuse Visual Studio Code task files in fake job projects to deploy backdoors, spyware, and crypto miners ...

The Firehound Project is a public registry that hunts down AI apps that expose user data—and there are a ton of them.

I tried four vibe-coding tools, including Cursor and Replit, with no coding background. Here's what worked (and what didn't).