ChatGPT and Codex flaws patched Feb 2026 exposed DNS exfiltration and GitHub tokens, raising enterprise AI security risks.
The TeamPCP hacking group has been using credentials stolen in the recent OSS campaign to enumerate and compromise AWS ...
Over 1,700 malicious packages since Jan 2025 fuel cross-ecosystem supply chain attacks, enabling espionage and financial ...
The threat group's shift to speedy attacks on AWS, Azure, and SaaS instances shows organizations need to respond quickly to ...
After the supply chain attack on LiteLLM, attackers were able to access internal Cisco data, it is said. Source code from ...
Microsoft will invest $10 billion in Japan through 2029 to expand AI infrastructure, deepen cybersecurity ties, and train ...
Socket uncovers large-scale GitHub spam campaign abusing “Discussions” notifications Fake advisories with bogus CVEs trick ...
The compromised packages, linked to the Trivy breach, executed a three‑stage payload targeting AWS, GCP, Azure, Kubernetes ...
CERT-EU attributed a 92 GB data breach at the European Commission to TeamPCP, which compromised the Trivy security scanner in ...
AI chatbots make it possible for people who can’t code to build apps, sites and tools. But it’s decidedly problematic.
A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...