AI agent exploited Salesforce sites; 263 objects, 55 Apex methods exposed at one portal, leading to PII and file leaks.

Researchers have uncovered a supply-chain attack that hides in Python packages, propagates like a worm, and tricks LLM-based ...

Hackers compromised 19 packages on the PyPI, collectively downloaded hundreds of thousands of times, in a new Shai-Hulud ...

Threat actors have struck the software supply chain yet again, this time hitting the Python Package Index (PyPI) with Mini Shai-Hulud in an attempt to spread poisoned code. In the latest campaign, ...

The power of Python trumps Excel workbooks.

A China-linked espionage group lived inside corporate cloud accounts for a year and a half by stealing trust instead of ...

Karen Read has filed a lawsuit against the Massachusetts State Police and Canton Police Department, alleging "a culture of ...

Karen Read has filed a lawsuit against the Massachusetts State Police and the town of Canton, alleging misconduct, negligence ...

A long-time GOP analyst compared President Donald Trump's dying "anti-weaponization" fund to an iconic scene from the movie ...

Cybersecurity researchers create a five-step exploit chain using over-permissioned roles, secrets discovery, and NHIs to attack a popular low-code service.

DCI lets AI agents search raw files with grep and bash instead of embeddings — boosting accuracy 11 points and cutting retrieval costs 30% on complex tasks.

TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious versions anyway. The CI/CD Trust-Chain Audit Grid maps the six gaps it ...