Microsoft Threat Intelligence said attackers placed malicious code inside a Mistral AI download distributed through a Python ...
Google says attackers are using AI for zero-day research, malware development, reconnaissance, and access to premium AI tools ...
TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...
A malicious repository on Hugging Face impersonated OpenAI’s “Privacy Filter” project and briefly reached the platform’s top trending position before removal ...
The website for the popular JDownloader download manager was compromised earlier this week to distribute malicious Windows ...
OpenAI is developing a new feature for the ChatGPT Android app that will allow users to remotely control Codex coding sessions on their PCs. Found in version 1.2026.125, this update addresses a ...
Reporting from May 2026 accurately claimed that Google Chrome silently installed a 4-gigabyte artificial intelligence model ...
A North Korean APT has crafted malicious software packages to appeal to AI coding agents, while ‘slopsquatting’ shows the ...
With model devs pushing more aggressive rate limits, raising prices, or even abandoning subscriptions for usage-based pricing ...
OX Security confirmed arbitrary command execution on six live platforms and estimates 200,000 MCP servers are exposed. Here's ...
Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a vulnerability in the developers’ account workflow that gave access to its signing keys ...