CopperDragon malware supplier may link five Chinese hacking groups, Check Point Research said Tuesday in a report on three espionage campaigns against telecoms, governments and critical infrastructure ...

A critical remote code execution flaw in OpenCode has been patched. The standard defender toolchain cannot see that. Anomaly, the developer of the open-source AI coding agent that Pillar Security’s ...

The numbers behind the trend are blunt. Sonatype’s 2026 State of the Software Supply Chain report counted more than 454,600 new malicious open-source packages in 2025, pushing the cumulative total it ...

Hackers from North Korea are notoriously effective at stealing crypto, with one estimate attributing 60% of all losses last ...

How OpenAI's AI agents escaped an eval sandbox, built a secret message board, and hacked Hugging Face, plus 8 lessons for teams shipping agents.

From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM, cybersecurity teams have plenty to worry about this week.

Researchers at Sekoia say a hacking group tied to Russia's SVR ran a watering-hole campaign that infected iOS and Android phones through ...

OpenClaw's Control UI trusted a gatewayUrl parameter, leaked the stored gateway token, and gave a malicious link remote code ...

On Wednesday, a decades-old open source web technology called PHP almost broke the internet, thanks to two vulnerabilities that had sat dormant for years until researchers recently figured out a way ...

Earlier this month, authorities worldwide urged website administrators to execute emergency updates after a nonprofit ...

AI code review vs SAST: how detection, bug coverage, determinism, false positives, and cost differ, and why combining them ...

SummarySlowMist uncovered compromised Swarm software releases that exposed Ethereum ecosystem users to potential ...