Anthropic's Claude Code CLI had its full TypeScript source exposed after a source map file was accidentally included in ...

A new wave of device code phishing shows how threat actors are scaling account compromise using AI and end‑to‑end automation.

This new Storm attack platform can exfiltrate passwords and session data, enabling 2FA bypass. Google Chrome, Microsoft Edge ...

OpenAI is developing a “super app” for desktop that unifies ChatGPT, its browser and its Codex app, according to the Wall Street Journal and CNBC. A company spokesperson told the publications that ...

The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, repositories, and extensions on GitHub, npm, and VSCode/OpenVSX extensions. Evidence ...

ByteDance has paused plans to launch its new AI video model globally, according to a report in The Information. The Chinese company, best known as TikTok’s parent organization (and now a minority ...

Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible code, a technique that’s flummoxing traditional defenses designed to ...

Sweden is investigating a reported leak tied to CGI Sverige after hackers claimed they exposed source code from the country’s e-government platform. A threat actor has claimed to have leaked source ...

Sora could soon get more accessible in ChatGPT, potentially leading to a new flood of deepfakes from the video generator. Sora could soon get more accessible in ChatGPT, potentially leading to a new ...