New research exposes how prompt injection in AI agent frameworks can lead to remote code execution. Learn how these ...

Plus: ICE plans to develop its own smart glasses. This is today's edition of The Download, our weekday newsletter that ...

ZiChatBot malware spread via 3 PyPI packages in July 2025 uses Zulip APIs as C2, enabling stealthy attacks across systems ...

A North Korean APT has crafted malicious software packages to appeal to AI coding agents, while ‘slopsquatting’ shows the ...

A single line of Python code was all it took. Developers who ran import lightning after installing versions 2.6.2 or 2.6.3 of ...

Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and ...

Anthropic today updated Claude with new connectors aimed at creative professionals, adding integrations for Ableton, Adobe, ...

This was not a case of stolen credentials, but rather of vulnerability exploitation.

A newly discovered threat actor is using Microsoft Teams, AWS S3 buckets, and custom "Snow" malware in a multipronged ...

Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...

An attacker pushed a malicious version of the popular elementary-data package Python Package Index (PyPI) to steal sensitive ...