A new class of CI/CD workflow weakness enables attackers to use malicious pull requests to compromise software supply chains. Elad Meged, founding engineer and security researcher at ...

Vienna, Austria, June 25, 2026 -- digna, the European data quality and observability platform, today announced the release of ...

Google fixed Rogue Agent, a Dialogflow CX Code Blocks flaw that could let one writable agent affect every chatbot in a Cloud ...

The multimodal model supports a 1-million-token context window and is available for fine-tuning with fully open weights.

According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD ...

Discussions ranged from the philosophical ‘am I who I am?’ to the Pythonesque ‘what has the EU ever done for us?’ ...

The $149 Dune keyboard can be a meeting controller at least and a script-executing keypad at best.

Varonis reported the flaw to Google in late 2025 and it has been addressed, but it reminds defenders to take a look at their ...

Indirect prompt injection attacks are now draining cryptocurrency from AI agents in production. Zscaler ThreatLabz documented ...

a laptop screen with a webpage of the IT Army of Ukraine group of volunteer hackers. The IT Army of Ukraine first set up in the wake of Russia's devastating attack, and has since hugely grown in ...

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your security tools look.