On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — ...

At Black Hat USA, Zenity Labs today announced new research detailing an active credential-stealing malicious skills campaign distributed through Vercel's skills.sh. The affected skill family amassed ...

Overview:  Learn how to use Playwright for modern web testing, from installation and project setup to writing reliable ...

Hollowframe Masks Malware Behind Trusted Python Files Arabian Post. clearfix>A newly identified malware operation has used a counterfeit Python component to bypass security scrutiny, disable parts of ...

Dependency confusion is a supply chain issue that affects how package managers choose where to download a dependency from. If your build or developer tooling can see both a private package registry ...

I installed over 100 Claude Code plugins so you don't have to. Here's the signal from the noise.

Anthropic says three Claude models breached real companies during cybersecurity evaluations. Ordinary weaknesses, chained ...

Attackers are currently pushing malware to IBM Langflow instances. In the cluster operation of Apache Tomcat, they can read network traffic.

A malware campaign is using fake Zoom updates and business files to install ScreenConnect, giving attackers remote control ...

DOUBLECUP hides malware stages in cached PNG files, then uses ClickFix commands to deliver CountLoader variants and the ...

Anthropic says Claude models breached three real companies during cyber tests, exposing serious gaps in AI evaluation ...

Malicious npm packages impersonate Alibaba tools to deliver a cross-platform RAT with command execution, persistence, and ...