The website for the popular JDownloader download manager was compromised earlier this week to distribute malicious Windows ...

The repository reached the #1 trending position on Hugging Face within 18 hours, highlighting how public AI repositories are ...

OpenAI says malware tied to the Shai-Hulud supply chain attack accessed internal repositories after infecting two employee ...

The crypto investor had Claude search through two Macs, two external hard drives, an Apple Notes export, iCloud Mail, Gmail inbox and X messages to help retrieve the Bitcoin. A Bitcoiner’s post has ...

TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...

Hundreds of packages across npm and PyPI have been compromised in a new Shai-Hulud supply-chain campaign delivering ...

Fake OpenAI Privacy Filter hit #1 on Hugging Face with 244,000 downloads, spreading infostealer malware to Windows users.

First revealed at NAB 2025, Nuke Stage enables real-time playback of photoreal environments onto LED walls using standard ...

TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...

KongTuke has been regarded as the original access broker and has switched to Microsoft Teams for social engineering attacks, ...

OpenAI has published a technical explanation of its Windows sandbox for Codex, detailing a stricter local setup for the coding agent on developer PCs. Codex can still read broadly across a system, ...

If you’ve downloaded the Cemu Wii U emulator for Linux from the project’s official GitHub in the past few weeks, bad news: it added malware to your system when you ran it. An announcement made by the ...