CERT-In warns of high-severity vulnerabilities in multiple Microsoft products, including Windows, Office, and Azure. Flaws ...

A leak of Suno's internal source code this week has pulled back the curtain on how the Cambridge AI music startup built the audio libraries behind its song generator, revealing millions of clips ...

HalluSquatting exploits AI coding assistants that hallucinate fake repository names, letting attackers register those names ...

Cursor IDE zero-day vulnerability: AI security firm Mindgard spent seven months trying to report a Windows code-execution ...

Attackers created at least 292 fake GitHub repositories that impersonated developer tools and redirected users to ...

Grok Build open source release arrives hours after xAI's covert upload scandal, but security researchers confirm the code ...

Stolen and leaked credentials lead to Node.js packages from AsyncAPI and Jscrambler Code Integrity being poisoned with ...

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...

Maximize development velocity and eliminate operations toil with this indie-favorite serverless, event-driven, no-ops stack.

A fake GitHub repository campaign created hundreds of malicious projects that impersonated legitimate software and cybersecurity tools. The repositories directed users to deceptive download pages that ...

Researchers reported the flaw to Cursor in December, but it still remains in the popular AI coding platform and can be used ...

Microsoft is extending Dataverse into coding-agent marketplaces while expanding its MCP tools, certification program and governance controls.