Researchers show HalluSquatting can make AI coding agents fetch fake repositories or skills and run attacker-supplied code.
Accenture confirmed a data breach after a hacker claimed to steal 35GB of internal data, including source code and ...
Researchers have uncovered a sustained campaign using GitHub's public APIs and ghost accounts to profile enterprise software ...
In the brief history of AI security, the prompt injection has quickly become the top threat. Large language models are ...
Sophos says Claude Code, Cursor, and Codex triggered Windows endpoint rules for credential access, LOLBin downloads, and ...
A prompt injection attack can trick GitHub’s preview Agentic Workflows into retrieving content from private repositories and ...
A critical prompt injection vulnerability in GitHub Agentic Workflows could allow unauthenticated attackers to leak private repository data, ...
A China-linked threat cluster has been exploiting vulnerable Roundcube servers at U.S. and Canadian universities to steal ...
Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to ...
An indicator is a claim, not a fact — and the advisory covering your own network is the one you can least afford to accept ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results