JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

Gravity SMTP WordPress vulnerability CVE-2026-4020 has drawn 17 million automated exploit attempts since May 2026, draining ...

ESET researchers assisted in the global disruption of the Amadey botnet and Stealc infostealer, providing technical analysis, ...

Retell AI, the fastest-growing AI voice agent platform, today announced the launch of Conductor, the first graph-native review system for production voice agents. Conductor is an AI copilot that ...

VS Code can use LLM models other than GitHub Copilot’s built-in providers for AI-assisted development, including local and ...

Wordfence has blocked 17M+ exploit attempts targeting a Gravity SMTP bug that leaks API keys, OAuth tokens, and full system reports without authentication.

Hackers created a fake trading bot for Polymarket’s prediction markets on GitHub. The bot was used to spread malware that ...

Malicious npm packages mimicking Rollup polyfill tooling steal browser data, crypto wallets, and AI tool credentials in a Lazarus-linked campaign.

AI agents are getting their own search engine ...

I gave Claude access to my Home Assistant. It helped me audit, debug, and improve my smart home better than I ever could have.

Semi-automate multi-protocol API calls, construct jq queries at the speed of light, or transform strings to and from any ...

Collabora has released version 26.04 of CODE, the company's web-based office suite. CODE stands for "Collabora Online ...