Hackers use credentials stolen in the GlassWorm campaign to access GitHub accounts and inject malware into Python repositories.

The headlines have been hard to ignore. Microsoft says roughly 20–30% of code in its repos is now written by AI. Claude ...

A new open-source tool called Betterleaks can scan directories, files, and git repositories and identify valid secrets using default or customized rules.

CNCERT warns OpenClaw AI agent has weak defaults enabling prompt injection and data leaks, prompting China to restrict use on government systems.

OpenDataLoader PDF PDF v2.0 is available now. Source code, benchmark datasets, and documentation are published at the OpenDataLoader PDF official GitHub repository. Photo - ...

Infosecurity spoke to several experts to explore what CISOs should do to contain the viral AI agent tool’s security vulnerabilities ...

OX Security today announced OX Agentic Pentester, a continuous penetration testing capability powered by agentic AI that validates real-world exploitability and connects each verified exposure ...

VS Code 1.111 Autopilot is not just a no-prompts mode. In testing, it handled a blocking question that still stopped Bypass.

The Contagious Interview campaign weaponizes job recruitment to target developers. Threat actors pose as recruiters from crypto and AI companies and deliver backdoors such as OtterCookie and ...

Anthropic, a smaller rival started by OpenAI defectors, has found runaway success with its programming agent, Claude Code.

Five malicious Rust crates and an AI bot exploited CI/CD pipelines and GitHub Actions in Feb 2026, stealing developer secrets ...

Open source collective reinvents web video players, with minimal adaptive bitrate player now 38kB gzipped vs. typical ...