A cyber attack hit LiteLLM, an open-source library used in many AI systems, carrying malicious code that stole credentials ...

Attackers weaponized critical RCE within hours, prompting CISA to add the flaw to its KEV catalog and set an urgent patch ...

Socket and Endor Labs discovered a new TeamPCP campaign leading to the delivery of credential-stealing malware ...

A large-scale study has revealed that websites are unintentionally exposing API keys tied to services like AWS, Stripe, and OpenAI, with most leaks traced back to publicly accessible JavaScript files.

Three LangChain flaws enable data theft across LLM apps, affecting millions of deployments, exposing secrets and files.

The move lets IT administrators standardize and distribute agent behaviors across engineering teams, but OpenAI’s third-party ...

With 15,384 commercial martech tools in the 2025 landscape and AI-powered pitches arriving daily, the biggest risk for ...

McMahon wrote that the malware was likely vibe coded, and sloppily at that, leading to the so-called “fork bomb” that crashed ...