Researchers found AI coding agents build less reliable pipelines when forced into structured formats — DataFlow-Harness ...

Dependency confusion is a supply chain issue that affects how package managers choose where to download a dependency from. If your build or developer tooling can see both a private package registry ...

Hugging Face has published a technical timeline of the July 2026 intrusion that OpenAI's evaluation models ran against its ...

AI agent social engineering attack: Anthropic's Mythos 5 invented fake GitHub identities and pressured a real developer to ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

It's far easier to find security holes than to fix them, and leaving it to AI can introduce 9 times as many new ...

Researchers have built a pull request that steals a repository's secrets by hiding the malicious instruction inside a PNG that AI code reviewers never open. The reviewer waves the change through.

NVIDIA and 36 partners form the Open Secure AI Alliance and release NOOA, while governance and joint deliverables remain ...

Autonomous AI cyberattack campaign using DeepSeek and the Hermes Agent framework attacked 460-plus targets after a Chinese ...

Major frontier AI vendors — including Anthropic, Google, and OpenAI — need to rein in the harnesses they wrap around their large language modules, to limit security weaknesses created by software ...

OpenAI rogue AI agent breach now confirmed at a second company: Modal Labs CTO Akshat Bubna disclosed that the same agent ...