Dependency confusion is a supply chain issue that affects how package managers choose where to download a dependency from. If your build or developer tooling can see both a private package registry ...

Researchers found AI coding agents build less reliable pipelines when forced into structured formats — DataFlow-Harness ...

Hugging Face has published a technical timeline of the July 2026 intrusion that OpenAI's evaluation models ran against its ...

The scale of AI-generated media can be hard to grasp. Starling Lab, a research collaboration from Stanford University and the ...

Researchers have built a pull request that steals a repository's secrets by hiding the malicious instruction inside a PNG that AI code reviewers never open. The reviewer waves the change through.

NVIDIA and 36 partners form the Open Secure AI Alliance and release NOOA, while governance and joint deliverables remain ...

Autonomous AI cyberattack campaign using DeepSeek and the Hermes Agent framework attacked 460-plus targets after a Chinese ...

Major frontier AI vendors — including Anthropic, Google, and OpenAI — need to rein in the harnesses they wrap around their large language modules, to limit security weaknesses created by software ...

OpenAI rogue AI agent breach now confirmed at a second company: Modal Labs CTO Akshat Bubna disclosed that the same agent ...

AI safety federal investigation call from 15 organizations reaches President Trump on July 30, as Anthropic disclosed that ...

China malware hospital espionage: Group-IB exposed JadeProx, a China-nexus cluster that breached a Vietnamese hospital ...