Cline CLI 2.3.0 was published with a stolen npm token, installing OpenClaw in an 8-hour attack affecting ~4,000 downloads.

A self-replicating npm worm dubbed SANDWORM_MODE hits 19+ packages, harvesting private keys, BIP39 mnemonics, wallet files and LLM API keys from dev environments.

Researchers found most leading AI agents do not publish detailed safety or risk assessments, raising transparency concerns.

Anthropic's new AI tool autonomously hunts and patches software vulnerabilities, disrupting the cybersecurity market and ...

Enkrypt AI introduces open-source protection for the AI development supply chain, securing coding assistant Skills ...

Physically breaking into an ATM is getting more popular and the FBI is sounding the alarm.

Amazon is warning that a Russian-speaking hacker used multiple generative AI services as part of a campaign that breached more than 600 FortiGate firewalls across 55 countries in five weeks.