Routine cybersecurity testing of frontier AI models sparked a series of unexpected security incidents—the most serious case ...

A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...

Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.

A Cursor zero-day vulnerability lets a planted git.exe run automatically when a Windows developer opens a repository.

More than 400 NPM packages have been infected with the Mini Shai-Hulud worm in the ChainDrop supply chain attack.

A Keyv-linked npm worm poisoned 353 versions across 79 package names, stealing developer and CI credentials while repository ...

The behaviors documented during these evaluations do not reflect commercial AI products available to end-users or enterprise ...

Another big name that's quitting GitHub is Mitchell Hashimoto. This is the creator of Vagrant and Ghost TTY. I want to get ...

Cursor IDE zero-day vulnerability: AI security firm Mindgard spent seven months trying to report a Windows code-execution flaw that let a cloned repository run attacker code automatically. Cursor ...

If you've been dying to run macOS on iPad hardware natively, a jailbreak solution has emerged for M1 and M2 iPads running ...

Developers are reconsidering GitHub. These alternatives offer better options for open source, privacy, self-hosting, and ...

Self-propagating malware named 'ChainDrop' has compromised more than 1,300 packages with a combined 2 billion monthly ...