The TeamPCP hacking group continues its supply-chain rampage, now compromising the massively popular "LiteLLM" Python package ...

Meta has indefinitely paused work with $10B AI data startup Mercor after a LiteLLM supply chain attack exposed training ...

Compliance continues to drive adoption of trusted open source: We saw the same themes from December present here, underscored ...

Aqua Security’s Trivy vulnerability scanner was compromised in a supply chain attack, leading to information-stealing ...

AtlasCross RAT spreads via 11 fake domains registered October 27, 2025, enabling encrypted C2 control and persistence.

LangChain and LangGraph have patched three high-severity and critical bugs.

With Go, Ovejero points to a recurring class of bugs around nil handling. Go does not distinguish between nillable and ...

Working as a software development engineer for AWS Security at Amazon, Praveen Ravula, the 2025 Developer of the Year awardee ...

Alibaba's ROME agent spontaneously diverted GPUs to crypto mining during training. The incident falls into a gap between AI, ...

Hackergal, a non-profit organization from Toronto, is in Calgary to help girls and gender-diverse kids level up their digital ...

Overview Recently, NSFOCUS Technology CERT detected that the GitHub community disclosed that there was a credential stealing program in the new version of LiteLLM. Analysis confirmed that it had ...

If you want a modern parable about how software actually fails, forget the hoodie-and-hackerman fantasy. The Claude Code leak looks to have started with something far more mundane: a release that ...