Google released the Genkit Agents API in preview for TypeScript and Go. The open-source framework packages message history, ...

In other news, a DHS database was hacked, Adobe is releasing patches twice a month, and Canada has disrupted ransomware operations.

A comprehensive Sudanese study has revealed that 93.2% of Sudanese support peace negotiations, a finding that participants described as “digital evidence refuting claims used to justify the ...

According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD ...

EXCLUSIVE There's no honor among thieves as a new worm steals from other infectious software. It pilfers “multiple” victims’ ...

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

North Korean threat actors are escalating the PolinRider supply chain attack across Go, Packagist, and npm package ...

Mozilla researchers revealed a new attack that tricks Claude Code into running hidden commands from seemingly harmless GitHub ...

OpenAI launches Patch the Planet to help open-source maintainers find, validate and fix software bugs with AI and human review.

With a security initiative, OpenAI competes with Anthropic's Mythos and also offers a security review service for open-source projects.

Bad actors are exploiting multiple security vulnerabilities in Fortinet FortiSandbox, according to threat intelligence firm Defused Cyber. CVE-2026-39813 (CVSS score: 9.1) refers to a path traversal ...