Slopsquatting represents an emerging supply chain threat made possible by AI hallucinations. As developers increasingly rely ...

A newly-disclosed exploit in Claude Code’s ‘auto-mode’ leaves developers facing remote code execution (RCE) vulnerabilities ...

Researchers at the AI Now Institute developed a proof-of-concept exploit showing common AI tools used for security could ...

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

Socket found a compromised Injective npm package stealing wallet keys amid rising crypto supply chain attacks.

Hackers compromised the Injective Labs SDK project's GitHub repository and used it to publish a malicious package on the Node ...

To defend against slopsquatting, proactive trust verification must occur before any dependency lands in a developer's hands.

Cybersecurity researchers at ESET identify big rise in suspicious and malicious toolsets which put users at risk from ...

search_vulns can be used to search for known vulnerabilities in software. To achieve this, it utilizes a locally built database containing various data sources about products, vulnerabilities, ...

Dark web intelligence is the missing layer in every security investigation. Breach databases, ransomware trackers, Tor hidden services, malware sandboxes, stealer logs, blockchain forensics, exploit ...

A vulnerability chain dubbed AutoJack in Microsoft’s AutoGen Studio interface for prototyping AI agents could let attackers manipulate an agent into executing arbitrary commands on its host system ...