TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...
TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...
Thousands of software development teams whose CI/CD pipelines depended on LocalStack’s free community edition lost access to ...
Mini Shai-Hulud hit 2 OpenAI devices via TanStack, exposing limited credentials and forcing macOS certificate updates by June ...
The tool is available for macOS, Linux, and Windows. It can be installed through a one-line shell command that automates ...
Hundreds of packages across npm and PyPI have been compromised in a new Shai-Hulud supply-chain campaign delivering ...
On May 11, the same day Google's Threat Intelligence Group disclosed the first confirmed case of attackers using AI to build ...
A cybercriminal group came close to launching a mass attack earlier this year, armed with a software exploit that an AI model ...
Google claims to have thwarted a significant cyberattack by state-sponsored hackers using an AI-developed zero-day exploit.
Google's GTIG identified the first zero-day exploit developed with AI and stopped a mass exploitation event. The report documents state actors using AI for vulnerability research and autonomous ...
Photo editing with AI feels unfair.
A fake repository mimicking OpenAI’s Privacy Filter on Hugging Face accumulated ~244,000 downloads before being removed. It delivered a multi-stage Rust infostealer ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results