Check Point links three espionage clusters to the Sparrow malware ecosystem, targeting telecom, government, and other sectors ...

Interchangeable encrypted reasoning blocks let attackers decode hidden chain-of-thought and leak PII and credentials from major LLM APIs.

Elastic's new quarterly “threats, etc” report catches attackers running commands through Claude Code and the ChatGPT desktop ...

A Python startup hook, a second runtime fetched at load, and the rule files of 14 AI coding agents rewritten. The campaign ...

Following PHP and Java, the compression library "Brotli" is now the subject of a vulnerability. Looking at the name alone, ...

Modern medical and salon IT infrastructure, including web booking systems for clinics and salons, medical interview forms, ...

Critical RCE flaws, millions of exploit attempts, rogue AI agents, supply chain attacks, leaked keys, and more.

On October 21, 2026, a compromised LiteLLM 1.107.0 release was published to the Python Package Index (PyPI) and distributed through official container images. The malicious package added files that ...

litellm 1.107.0 shipped a credential stealer and an hourly remote code loader in all seven PyPI wheels and the official Docker images. The attacker hijacked BerriAI's release workflow with a GitHub ...

Every agent that writes code needs somewhere to run it. That “somewhere” is now a product category with at least a dozen vendors, four incompatible billing models, and marketing pages that quote cold ...

Microsoft Teams phishing is again being used as a doorway to deliver a malware family called SynkLoader. The campaign relies on a familiar social-engineering trick: an attacker poses as an IT helpdesk ...