Malicious LiteLLM PyPI releases stole cloud and SSH keys, Kubernetes tokens, and other secrets, potentially exposing 2,500+ ...

Malicious Solidity Pro VS Code extensions steal crypto wallets, API keys, SSH keys, and developer tokens, then exfiltrate the ...

A zero-day SQL-injection vulnerability in Metabase Cloud is under exploitation in the wild, and it could spell trouble for many downstream organizations. Metabase, which provides AI-driven business ...

Drop a file in a folder and have it processed automatically. It feels like magic, but it’s easy to set up—and there’s masses ...

Check Point researchers tried to break the frameworks enterprises use to build AI apps. Now they're telling Black Hat ...

Kimsuky North Korea AI hacking expanded significantly: the spy group built a self-hosted LLM lab inside its own attack ...

AI-generated code is accelerating software development, but review processes are not keeping pace. Learn why enterprises need ...

Meta launches Muse Code, a terminal-based AI coding agent built to handle large software projects and compete with Claude ...

Development environments have evolved into toolkits for directing coding models and coordinating agents. GitHub Copilot, ...

MCP server for Nutanix Cloud Platform brings secure, natural-language, agentic AI automation to hybrid cloud environments without sacrificing control ...

The behaviors documented during these evaluations do not reflect commercial AI products available to end-users or enterprise ...

At Black Hat USA, Zenity Labs today announced new research detailing an active credential-stealing malicious skills campaign distributed through Vercel's skills.sh. The affected skill family amassed ...