The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...

Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...

I tried Zenclora, a hyper-fast Linux distro with no bloat - and one truly standout feature ...

A fake $TEMU crypto airdrop uses the ClickFix trick to make victims run malware themselves and quietly installs a remote-access backdoor.

Manufact, a Y Combinator startup, raised $6.3 million to build open-source tools and cloud infrastructure for the Model Context Protocol (MCP), the fast-growing standard backed by Anthropic and OpenAI ...

The Contagious Interview campaign weaponizes job recruitment to target developers. Threat actors pose as recruiters from crypto and AI companies and deliver backdoors such as OtterCookie and ...

Paperclip is organizing OpenClaw AI agents into full company structures with roles, budgets, and tasks, signaling the rise of AI-run organizations.

Microsoft's AI Toolkit extension for VS Code now lets developers scaffold a working MCP server in minutes. Here's what that looks like in practice -- including the parts that don't work, and a simpler ...

An undefined Chinese-speaking actor wields a combo of custom malware, open source tools, and LOTL binaries against Windows ...

OpenAI has launched Codex for Open Source, offering maintainers six months of free ChatGPT Pro and API credits amid a surge of AI-generated pull requests.

Atek Midas, a Turkish company, has launched DSG-22.6 GHz, a high-performance, open-source RF signal generator designed to provide professional-grade ...