North Korea-linked Lazarus campaign spreads malicious npm and PyPI packages via fake crypto job offers, deploying RATs and ...

Compromised dYdX npm and PyPI packages delivered wallet-stealing malware and a RAT via poisoned updates in a software supply chain attack.

Darktrace researchers say hackers used AI and LLMs to create malware to exploit the React2Shell vulnerability to mine ...

An AI agent got nasty after its pull request got rejected. Can open-source development survive autonomous bot contributors?

DuckDuckGo is offering its own voice AI chat feature built using OpenAI models, all for free, and with no data tracking at ...

A decade-old critical security vulnerability affects over 800,000 internet-exposed telnet servers, with reports of active ...

A volunteer open-source maintainer rejected an AI-generated code contribution, and the bot responded by publishing a blog ...

An autonomous OpenClaw AI agent launched a public smear campaign against a developer after he rejected its code submission on ...

Imagine starting your day with a quick, digestible summary of the most important tech conversations happening on Hacker News. That’s the promise of a daily tech update. These digests cut through the ...

Two popular AES libraries, aes-js and pyaes, “helpfully” provide a default IV in their AES-CTR API, leading to a large number of key/IV reuse bugs. These bugs potentially affect thousands of ...

Weave Robotics has started shipping Isaac 0, a $7,999 stationary robot that promises to fold your laundry while yo ...