Malicious telnyx 4.87.1/4.87.2 on PyPI used audio steganography March 27, 2026, enabling cross-platform credential theft.

The cybercrime crew linked to the Trivy supply-chain attack has struck again, this time pushing malicious Telnyx package versions to PyPI in an effort to plant credential-stealing malware on ...

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

Google DeepMind CEO Demis Hassabis fired back at software engineer Steve Yegge after a viral post claimed Google's internal AI adoption was no better than John Deere's. Yegge, citing a conversation ...

APERION (formerly LangSmart), the enterprise AI governance company, today announced the launch of the SmartFlow SDK, ...

A convincing Microsoft lookalike tricks users into downloading malware that steals passwords, payments, and account access.

New AI-powered scanner -- who-touched-my-packages -- detects zero-day malicious packages and credential exfiltration in seconds BOSTON, March 26, 2026 /PRNewswire/ -- Point Wild, a leading global ...

FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...

Meta pauses Mercor partnership after a major data breach raises concerns over exposure of sensitive AI training data.

TeamPCP is exploring ways to monetize the secrets harvested during supply chain attacks, with identified ties to the Lapsus$ ...

TeamPCP strikes again, with almost identical code to LiteLLM.

Shadow AI 2.0 isn’t a hypothetical future, it’s a predictable consequence of fast hardware, easy distribution, and developer ...