Chainguard is racing to fix trust in AI-built software - here's how ...

Why send your data to the cloud when your PC can do it better?

Langflow CVE-2026-33017 exploited in 20 hours after disclosure, enabling RCE via exec(), exposing systems before patching ...

They have a certain charm, for sure.

A threat actor who stole credentials from a legitimate node package manager (npm) publisher has spread a persistent, ...

Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...

During a recent penetration test, we came across an AI-powered desktop application that acted as a bridge between Claude ...

The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed ...

Learn how to protect Model Context Protocol (MCP) from quantum-enabled adversarial attacks using automated threat detection ...

Nvidia unveiled its open-source Agent Toolkit at GTC 2026, adding OpenShell, AI-Q, and major partners including Adobe, SAP, ...