Hugging Face says an autonomous AI agent breached production through a malicious dataset, accessing internal data and service ...

I might just stick to it.

In November 2025, a supply‑chain breach revealed Suno Inc.’s hidden recipe for harvesting music from the web. Hackers ...

HalluSquatting exploits AI coding assistants that hallucinate fake repository names, letting attackers register those names ...

North Korean hackers hide a four-stage OtterCookie payload in SVG files inside fake coding tests to steal browser data and ...

Cursor IDE zero-day vulnerability: AI security firm Mindgard spent seven months trying to report a Windows code-execution ...

Attackers created at least 292 fake GitHub repositories that impersonated developer tools and redirected users to ...

Microsoft Comic Chat is a Microsoft-developed Internet Relay Chat (IRC) chat client released in 1996 that rendered conversations as automatically generated comic strips. Instead of plain text, users ...

Zero trust, the security model built on the assumption that no user, device, or system should be automatically trusted, ...

MIT-licensed open-source project applies a 25-theme gallery to Codex Desktop through local loopback CDP injection, ...

Grok Build uploaded full Git repositories to xAI cloud storage before xAI disabled the behavior and Musk pledged to delete ...