A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit, ...

Several AI coding assistants were tricked into facilitating developer machine hacking via an attack technique that has been ...

LongCat 2.0 is Meituan's 1.6T-parameter MoE model with a native 1M-token context, trained entirely on domestic AI ASIC ...

The safety check that is supposed to stop an AI coding agent from running a dangerous command can be walked straight past using a shell trick that has been public for decades. New research from ...

Decades-old Bash shell tricks can bypass safeguards in most open source AI coding agents, potentially turning malicious repositories into supply chain attack vectors. Bash (Bourne Again SHell), the ...

This week was a reminder that attackers do not always need big tricks. One small mistake, one old access path, one missed patch, and suddenly the door is open. The noise is not all noise, either.

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious payload that remains invisible to security scanners, AI agents, and human ...

Explore the Chinese open-source AI model challenging OpenAI and Anthropic with powerful coding abilities, agentic workflows, and frontier-level performance.

MENACE is a turn-based tactical RPG where you lead squads of TCRN marines through missions in the Wayback. Your foes are numerous and death lurks around every corner, but service is always an act of ...