Security researchers found two AI-branded VS Code extensions with 1.5M installs that covertly send source code and files to ...

On Friday, OpenAI engineer Michael Bolin published a detailed technical breakdown of how the company’s Codex CLI coding agent ...

Knostic found 1,862 MCP servers exposed with zero authentication. Here are five actions CISOs should take now.

Nonprofit security organization Shadowserver has found over 6,000 SmarterMail servers exposed online and likely vulnerable to attacks exploiting a critical authentication bypass vulnerability.

Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers.

It never stops. Attackers continue to exploit new vulnerabilities and tricks to hack accounts or infiltrate devices. To stay ...

Research shows that even simple Chrome extensions can quietly invade user privacy, with some hijacking clipboards, ...

Organizations can now use Descope as a dedicated auth and access control layer for AI agents and MCP servers with ephemeral ...

Steam pulls the viral MMO Dreadmyst as the dev releases source code to dispute malware fears and identity rumors.

See an AMD laptop with a Ryzen AI chip and 128GB memory run GPT OSS at 40 tokens a second, for fast offline work and tighter ...

Footage showing two players in a locally-hosted game is "really hacky," but it works.

January 2026 was a wake-up month for enterprise security teams. In a single week, CERT-In released three high-severity ...