Self-propagating npm worm steals tokens via postinstall hooks, impacting six packages and expanding supply chain attacks.

Google launches AI agent suite at Cloud Next 2026 with Workspace Studio, A2A protocol at 150 orgs, and Project Mariner. The pitch: only Google owns the full stack.

Yet another npm supply-chain attack is worming its way through compromised packages, stealing secrets and sensitive data as ...

OpenAI launches ChatGPT Images 2.0 with image editing, reasoning, web research, multilingual support, and better text ...

The Chrome and Edge browsers have built-in APIs for language detection, translation, summarization, and more, using locally ...

A multi-tenant authentication gap in Microsoft’s AI operations agent exposed live command streams, internal reasoning, and ...

A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer credentials and attempting to spread through packages published from compromised accounts.

The CVSS‑9.3 vulnerability allows unauthenticated remote code execution on exposed Marimo servers and was exploited in the wild shortly after disclosure, Sysdig says.

MicroPython is a well-known and easy-to-use way to program microcontrollers in Python. If you’re using an Arduino Uno Q, ...

Cybersecurity researchers have discovered a critical "by design" weakness in the Model Context Protocol's (MCP) architecture ...

Explore the top 10 new and promising API testing tools in 2025-2026 that are transforming the testing landscape.

Between December 2025 and February 2026, a lone attacker used Anthropic's Claude and OpenAI's GPT-4.1 to breach nine Mexican ...