A flaw in Hugging Face Transformers could allow malicious AI models to execute code, exposing credentials and highlighting AI ...

The smartest way to use AI may not be letting it touch your files, but asking it to write software that handles them safely - ...

With over 2.2 billion installs, the flawed Python package offers attackers a huge blast radius, including silent access to ...

Meta’s Rust-powered linter and type checker for Python pairs blazing speed with advanced and innovative features.

Learn why Linux Kernel developers want to deprecate AF_ALG features, and the security concerns driving the decision.

Microsoft has had a VS Code extension for a long time, and it finally came back to bite them.

ESPHome 2026.5.0 has just been released with the beta version of the new ESPHome Device Builder web app that replaces the legacy in-tree dashboard with a real configuration editor, a firmware job ...

Save your clicks with a few lines of Python code.

A GitHub employee installed a routine VS Code extension update, handed cybercrime group TeamPCP enough access to exfiltrate ...

Today, I’m pleased to introduce something I’ve been working on for the past six months: Shortcuts Playground, a plugin for Claude Code and Codex that can create any shortcut for Apple’s Shortcuts app ...

GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks that has impacted hundreds of organizations.

GitHub confirmed attackers stole 3,800 internal repositories via a poisoned VS Code extension. The same threat group, TeamPCP ...