GitHub confirmed attackers stole 3,800 internal repositories via a poisoned VS Code extension. The same threat group, TeamPCP ...

Researchers at the University of Toronto showed how hackers could use artificial intelligence to create a program that could ...

GitHub disabled 73 Microsoft repos after the Miasma worm exploited previously compromised credentials to plant malware targeting AI coding agents.

Agentic AI security dominated Infosecurity Europe 2026 as Toronto researchers proved a free open-weight AI worm can ...

Perplexity launches Bumblebee: How its new read-only dev scanner differs from Chainguard ...

GlassWorm poisoned 300 GitHub repositories since 2025, enabling supply chain attacks against developers and organizations.

A GitHub employee installed a routine VS Code extension update, handed cybercrime group TeamPCP enough access to exfiltrate approximately 3,800 of GitHub's internal source code repositories — everythi ...

TeamPCP published Shai-Hulud source code to GitHub last week, and the infamous worm already shows signs of spreading. A developer would download an open source software component that has been ...

Nicola Jones is a freelance writer in Pemberton, Canada. Last year, climate researcher Zeke Hausfather was playing around with climate-data visualizations, trying to find new and shocking ways to show ...

CrowdStrike, working with Google and the Shadowserver Foundation, said it has taken down the Glassworm botnet, a ...

The dates for the 2026 Florida Python Challenge are set. Here's how last year's winner captured a whopping 60 pythons for the $10,000 grand prize.

A single developer. One poisoned extension. Five supply chain surfaces compromised in 48 hours. And a threat group claiming ...