Hack suggests AI music generator Suno scraped YouTube for training data

The hacker used an employee's credentials to access source code, which revealed how Suno scraped decades of audio.

Nearly 300 GitHub repos pose as legit software to push malware

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...

AsyncAPI npm packages infected with credential-stealing malware

Five malicious versions of AsyncAPI packages were published to the Node Package Manager (npm) in a supply-chain attack that ...
Dark Reading

2-Click Cursor Exploit Enables Dev Environment Takeover

A popular artificial intelligence (AI) coding tool can be exploited in just two clicks, allowing attackers to install permission-rich model context protocol (MCP) servers on privileged developers' ...