Zscaler found attackers using SEO poisoning and hidden prompts in malicious websites to manipulate AI agents into making cryptocurrency payments.

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

In 2026, trading is no longer just about charts, instincts, or financial experience. The real competition in the market has ...

OpenAI launches Patch the Planet to help open-source maintainers find, validate and fix software bugs with AI and human ...

Secure software supply chain solution provider Chainguard Inc. today expanded its Chainguard Repository product with malware ...

FL-Byzantine-Library/ ├── main.py # Entry point — training loop orchestration ├── fl.py # FL coordinator (training, aggregation, evaluation) ├── client.py # Client class (local training, optimizer ...

Cybersecurity researchers have discovered a set of malicious npm packages that are designed to deliver a Windows-based remote access trojan (RAT). The list of identified packages, is below - ...

Microsoft Threat Intelligence and Microsoft Defender Experts identified a Windows-based cryptocurrency clipper that has affected users since February of 2026. Clipper malware relies on stealing ...

This research is part of a joint initiative between the Cloud Security Alliance (CSA) and OWASP AI Exchange, building upon the previously published Agentic AI Red Teaming Guide. The objective of this ...

Sperax, the DeFi protocol founded in late 2019 and creator of USDs, the first auto-yield stablecoin, today announced that SperaxOS , its AI agent workspace for DeFi, is now fully public and open ...