An attacker poisoned 84 TanStack npm versions across 42 packages, stealing GitHub OIDC tokens and cloud keys while planting a ...

Sometimes the smallest Python scripts can make the biggest difference in your daily workflow. From auto-sorting messy folders to streamlining your morning routine, these bite-sized automations save ...

The popular Python package for monitoring data quality was briefly available as a malicious version. Provider Elementary ...

Google identified the first malicious AI use for a zero-day 2FA bypass in an open-source admin tool, accelerating threat ...

On Halloween 2018 a developer filed an issue in the GitHub repo for the VS Code Python extension, asking for the ability for users to "spin up multiple 'Python Interactive' windows." In August 2020, ...

Google claims to have thwarted a significant cyberattack by state-sponsored hackers using an AI-developed zero-day exploit.

Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and ...

Google says attackers are using AI for zero-day research, malware development, reconnaissance, and access to premium AI tools ...

Google said it disrupted a planned mass exploitation campaign involving a Python zero-day exploit likely developed with AI.

The 2026 picoCTF competition has officially expanded with more challenges than ever before, yet the transition from the block-based logic of Karel to the raw Python scripting required for CTFs remains ...

New research exposes how prompt injection in AI agent frameworks can lead to remote code execution. Learn how these ...