Risky security flaws are found in 45% of AI-generated code tests. Here are the 5 checks that make a vibe coded app safe to ship.

Terabytes worth of credentials, many belonging to the world’s biggest and most sensitive organizations, have been exposed in a supply-chain attack on LiteLLM, an open source tool that streamlines ...

Replayable AI reasoning blocks let researchers recover API keys and passwords from public logs; they say the main extraction attack is now mitigated.

An OpenClaw agent running Claude Opus 4.6 hacked a gym’s booking API. It deleted another member’s waitlist reservation and moved its owner from fourth to third in line. The deletion could not be ...

Microsoft 365 phishing campaign disclosed by Arctic Wolf Labs abuses Google Meet and Amazon S3 to bypass enterprise email ...

On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — ...

A new Russian loader-as-a-service named DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by ...

WEST LAFAYETTE, Ind. — Researching other planets requires a lot of earthbound travel, taking Ali Bramson, an associate professor in Purdue University’s College of Science, from snowy slopes in Iceland ...

A newly discovered espionage implant has been using a hijacked Microsoft 365 calendar as its command channel, planting operator instructions and smuggling out stolen files as attachments on calendar ...