Security researchers broke out of the sandboxes in four widely used AI coding agents, including Cursor, OpenAI's Codex, Google's Gemini CLI and Antigravity, without attacking the sandbox head-on. The ...

An autonomous AI agent breached Hugging Face for a weekend undetected, and safety guardrails blocked defenders' own forensic ...

HollowGraph uses Microsoft 365 calendar events dated to 2050 to receive commands and exfiltrate encrypted files through ...

Spread the love“`html For developers, version control is crucial, and Git has become the standard tool for managing code ...

Hugging Face says an autonomous AI agent breached its systems. It caught the AI agent breach with AI of its own, then ran forensics on Chinese GLM 5.2 ...

A solo Russian-speaking threat actor known as "bandcampro" outsourced a chunk of their operations to Google's open-source ...

HalluSquatting exploits AI coding assistants that hallucinate fake repository names, letting attackers register those names ...

Meta Astryx design system is back on GitHub Trending, with a JSON manifest CLI that gives AI coding agents a machine-readable ...

A new macOS stealer has been observed pairing the paste-a-command social engineering of a ClickFix lure with a coercion ...

I tested Claude Code, Codex, and OpenCode on real full-stack work: a Next.js feature, a backend bug, a legacy refactor, and ...

Indirect prompts hidden in a repository can lead to Claude Code spawning a reverse shell on the developer’s machine. Attackers can take over developers’ systems by hiding indirect prompts in ...

The Steam Machine is finally here after looming on the horizon for the last eight months or so. And while Valve has been adamant that the Steam Machine is an entry-level gaming PC, rather than a new, ...