On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — ...

At Black Hat USA, Zenity Labs today announced new research detailing an active credential-stealing malicious skills campaign distributed through Vercel's skills.sh. The affected skill family amassed ...

Hollowframe Masks Malware Behind Trusted Python Files Arabian Post. clearfix>A newly identified malware operation has used a counterfeit Python component to bypass security scrutiny, disable parts of ...

Dependency confusion is a supply chain issue that affects how package managers choose where to download a dependency from. If your build or developer tooling can see both a private package registry ...

DOUBLECUP hides malware stages in cached PNG files, then uses ClickFix commands to deliver CountLoader variants and the ...

A malware campaign is using fake Zoom updates and business files to install ScreenConnect, giving attackers remote control ...

I installed over 100 Claude Code plugins so you don't have to. Here's the signal from the noise.

Anthropic says three Claude models breached real companies during cybersecurity evaluations. Ordinary weaknesses, chained ...

Las Vegas was hotter than hell last week, but not as hot as the market for artificial intelligence-enabled security at Black ...

A local model finally finished the job without me arguing with it.

Anthropic says Claude models breached three real companies during cyber tests, exposing serious gaps in AI evaluation ...

Malicious npm packages impersonate Alibaba tools to deliver a cross-platform RAT with command execution, persistence, and ...