A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

Three levels of indirection, all with seemingly innocuous steps, will catch a bot off-guard.

CodinIT.dev is an open‑source, AI full‑stack development platform designed to help developers build modern Node.js applications with speed and precision. It combines code generation, project ...

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...

Developers get unrestricted access to thousands of nearly CVE-free images from the Minimus catalog of distroless, hardened ...

GPT-5.5 Cyber tops the CyberGym leaderboard as Anthropic's best models sit offline under a Trump administration export ban.

As AI tools flood open-source maintainers with low quality bug reports, OpenAI's new Patch the Planet initiative aims to filter out the noise and fix real threats.

Metis is an open-source, agentic AI security framework for deep security code review, created by Arm's Product Security Team. It helps engineers detect subtle vulnerabilities, improve secure coding ...

Microsoft’s Project Solara previews a future where AI agents run on managed enterprise devices, not just PCs, browsers, or chat windows. The platform is still early, but its badge and desk concepts ...

A security researcher found a flaw in Anthropic's Claude Code GitHub Action that let an attacker take over vulnerable public repositories running it, with nothing more than a single opened GitHub ...