Self-propagating npm worm steals tokens via postinstall hooks, impacting six packages and expanding supply chain attacks.

A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer credentials and attempting to spread through packages published from compromised accounts.

OpenAI launches ChatGPT Images 2.0 with image editing, reasoning, web research, multilingual support, and better text ...

Google launches AI agent suite at Cloud Next 2026 with Workspace Studio, A2A protocol at 150 orgs, and Project Mariner. The pitch: only Google owns the full stack.

A simple brute-force method exploits AI randomness to generate restricted outputs. Here’s how it puts your data, brand, and ...

A multi-tenant authentication gap in Microsoft’s AI operations agent exposed live command streams, internal reasoning, and ...

Every secure API draws a line between code and data. HTTP separates headers from bodies. SQL has prepared statements. Even email distinguishes the envelope from the message. The Model Context Protocol ...

When you get past the playing around stage, you need a more powerful solution ...

Cybersecurity researchers have identified 22 new vulnerabilities in popular models of serial-to-IP converters from Lantronix ...

The 'AI engineer' role is a myth. You actually need a mix of rapid prototypers, full-stack builders and reliable scalers to ...

OpenAI’s new workspace agents can be shared within organizations, “so teams can build an agent once, use it together in ...

Cloudflare has released Sandboxes and Containers into general availability, providing persistent isolated Linux environments ...