With over 2.2 billion installs, the flawed Python package offers attackers a huge blast radius, including silent access to ...
A flaw in Hugging Face Transformers could allow malicious AI models to execute code, exposing credentials and highlighting AI ...
GGUF parser vulnerabilities disclosed May 15, 2026 include a critical integer overflow that lets any malicious model file ...
The Chinese-speaking cybercrime group TA4922 has been escalating its malicious activities, expanding to Europe and Africa.
GlassWorm poisoned 300 GitHub repositories since 2025, enabling supply chain attacks against developers and organizations.
Microsoft’s new Surface RTX Spark Dev Box packs Nvidia Blackwell AI power and 128GB of unified memory to run large AI models ...
CrowdStrike, Google and the Shadowserver Foundation worked together to take down a botnet that poisoned over 300 GitHub ...
Microsoft uncovered 150+ AI-assisted cryptojacking domains using fake software downloads to deploy persistent malware.
A coordinated malware campaign known as TrapDoor has hit software ecosystems widely used by crypto and blockchain developers.
Microsoft has had a VS Code extension for a long time, and it finally came back to bite them.