North Korean hackers hijack developer credentials to inject malware into trusted software projects, compromising downstream ...

A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana ...

A cryptocurrency mining campaign has resurfaced on Hugging Face shortly after its earlier accounts were removed, using fake ...

ESET APT report 2026 reveals Belarus-aligned hackers conducted the first-ever destructive cyberattack by a Belarus-linked ...

The other day, I saw the news about a critical vulnerability in PHP, which made me think about it all over again.On October ...

LiteLLM, an open-source tool widely used by artificial intelligence developers, said a key accidentally exposed in May was ...

LiteLLM supply chain attack: 1.107.0 shipped a credential stealer to PyPI and Docker on Oct. 21, two days after OVHcloud CLI ...

A Hugging Face model loaded with trust_remote_code ran a cryptominer, and in some builds a reverse shell. Every scanner ...

Stolen tokens and unrotated credentials drove a wave of supply chain attacks. Use these steps to protect your pipeline and your customers.

A security firm patched a decade-old app to prevent takeover of millions of machines, highlighting that abandoned domains ...

Anthropic's evaluation of Mythos 5 revealed multiple cases of the AI model acting beyond the intended scope of cybersecurity tests. In one incident, it attempted to submit malicious code to a real ...

An open-source artificial intelligence model gateway allowed a threat actor to gain owner-level access to its entire GitHub ...