A new Russian loader-as-a-service named DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by ...

Dependency confusion is a supply chain issue that affects how package managers choose where to download a dependency from. If your build or developer tooling can see both a private package registry ...

Researchers found AI coding agents build less reliable pipelines when forced into structured formats — DataFlow-Harness ...

Hugging Face has published a technical timeline of the July 2026 intrusion that OpenAI's evaluation models ran against its ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Five people who smuggled 200 endangered animals into South Korea — concealing them in underwear and other hiding spots — have ...

It's far easier to find security holes than to fix them, and leaving it to AI can introduce 9 times as many new ...

Researchers have built a pull request that steals a repository's secrets by hiding the malicious instruction inside a PNG that AI code reviewers never open. The reviewer waves the change through.

Autonomous AI cyberattack campaign using DeepSeek and the Hermes Agent framework attacked 460-plus targets after a Chinese ...

AI agent social engineering attack: Anthropic's Mythos 5 invented fake GitHub identities and pressured a real developer to ...

OpenAI rogue AI agent breach now confirmed at a second company: Modal Labs CTO Akshat Bubna disclosed that the same agent ...