A developer has detailed an open-source, cloud-agnostic continuous threat exposure management (CTEM) program that mirrors an attacker's reconnaissance to identify and remediate exposures before they b…
A developer's analysis of thirteen cyber incidents from late 2025 through August 2026 reveals a common failure: attackers exploit valid credentials at machine speed, outpacing human-paced defenses. Th…
In March 2026, threat actor group TeamPCP published two backdoored versions of LiteLLM (1.82.7 and 1.82.8) to PyPI, live for roughly six hours, compromising more than 2,500 organizations and 434,000 C…
On March 24, 2026, threat actor group TeamPCP compromised the PyPI distribution pipeline for LiteLLM, a Python package with 95 million monthly downloads, pushing malicious versions 1.82.7 and 1.82.8 t…
In the first half of 2026, two autonomous AI agent campaigns compromised developer infrastructure: one exploited GitHub Actions workflows at Microsoft, DataDog, and CNCF projects, achieving remote cod…
A developer studying AI and big data warns that AI is increasing cyber vulnerability in two ways: attackers using AI for more sophisticated attacks, and vulnerabilities introduced by integrating AI in…
Three prompt injection attacks in 72 hours highlight structural vulnerabilities in agentic AI systems. A CVE against Cursor demonstrates that per-call validation fails when agents operate in poisoned …
Supply chain attacks on npm and GitHub Actions are exploiting the gap between malicious package publication and CVE issuance, with attackers publishing compromised versions that are installed by thous…