Supply chain attacks feel like they're becoming more and more common.

The TeamPCP hacking group continues its supply-chain rampage, now compromising the massively popular "LiteLLM" Python package ...

Python has made using Microsoft Excel much easier than it has ever been, and it isn't very hard to start using it yourself.

Axios 1.14.1 and 0.30.4 injected malicious [email protected] after npm compromise on March 31, 2026, deploying ...

KXAN sat down with a member of the Austin AI Alliance and discussed results from one of the alliance's recent polls revealing ...

Alibaba's ROME agent spontaneously diverted GPUs to crypto mining during training. The incident falls into a gap between AI, ...

The open-source tool promises hands-free automation, but users may find it costly, complex, and less practical than expected.

Instead of the usual phishing email or fake download page, attackers are using Google Forms to kick off the infection chain. The attack typically begins when a victim downloads a business-themed ZIP ...

A new survey of 375 sports medicine experts has uncovered that some of the most popular and sketchiest products aren't even ...

Malicious telnyx 4.87.1/4.87.2 on PyPI used audio steganography March 27, 2026, enabling cross-platform credential theft.

During a recent penetration test, we came across an AI-powered desktop application that acted as a bridge between Claude ...

Updated: Hijacked maintainer account let attackers slip cross-platform trojan into 100M-downloads-a-week Axios ...