Risky security flaws are found in 45% of AI-generated code tests. Here are the 5 checks that make a vibe coded app safe to ship.

ChainDrop hijacked 444 npm packages and 2B monthly downloads via a Claude Code hook. AI agents have collapsed the gap between ...

A phishing campaign targeting cybersecurity conference attendees has been using Google Docs and other familiar online services to deliver malware, including a Windows payload that can install its own ...

Spread the loveIf you’ve spent any significant time wrestling with APIs, you know the drill: repetitive setup, token ...

Hackers exploit exposed AI gateways and workflow tools to steal secrets, access corporate systems, and mine cryptocurrency.

Spread the loveIf you’ve spent any time at all working with APIs, you know the drill: you’re constantly juggling different ...

Over 50,000 exposed Stripe API keys show how leaked secrets can enable fraud, data access and account abuse within hours.

A threat actor has published a dataset containing allegedly live Stripe API keys for 659 merchant accounts, exposing data ...

Apple has started sending some users push notifications warning that they have been targeted with specific malware. No specific information about the threat Apple detected is available. While ...

An AI-driven attack that compromised Asian government systems, cracked 85 accounts, and stole 2,500+ personnel records.

The paper, titled “Stealing Reasoning Traces from Proprietary LLM APIs,” details how bad actors can access and steal ...