APT29-linked attackers use compromised sites and Plerdy analytics to deliver iOS and Android exploits that steal browser and ...

Hackers from North Korea are notoriously effective at stealing crypto, with one estimate attributing 60% of all losses last ...

AI code review vs SAST: how detection, bug coverage, determinism, false positives, and cost differ, and why combining them ...

A critical remote code execution flaw in OpenCode has been patched. The standard defender toolchain cannot see that. Anomaly, the developer of the open-source AI coding agent that Pillar Security’s ...

From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM, cybersecurity teams have plenty to worry about this week.

Researchers at Sekoia say a hacking group tied to Russia's SVR ran a watering-hole campaign that infected iOS and Android phones through ...

OpenClaw's Control UI trusted a gatewayUrl parameter, leaked the stored gateway token, and gave a malicious link remote code ...

The numbers behind the trend are blunt. Sonatype’s 2026 State of the Software Supply Chain report counted more than 454,600 new malicious open-source packages in 2025, pushing the cumulative total it ...

October brought a heavy run of cybersecurity disclosures involving cryptocurrency exchanges, web servers, AI tools, software ...

Hackers are using Coruna and DarkSword exploit chains across a large web network to compromise vulnerable iPhones without ...

Volunteer-led PHP, which powers most websites, is increasingly under threat from cyberattacks using AI capabilities.

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: r/opensource bans AI ...