CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server ...

CVE-2026-5752 CVSS 9.3 flaw in Terrarium enables root code execution via Pyodide prototype traversal, risking container ...

On April 30, 2026, someone slipped credential-stealing malware into two freshly published versions of PyTorch Lightning, one ...

If OpenAI can accidentally train its flagship model to obsess over goblins, what other more subtle and potentially harmful ...

Trumpet blares, fading sounds of heartbeats and a ringing alarm clock. These aren’t sound effects for a movie — rather, for ...

Publicly released exploit code for an effectively unpatched vulnerability that gives root access to virtually all releases of ...

Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...

A group of hackers used both Claude Code and ChatGPT in a cybersecurity hack that lasted two and a half months.

Over 1,800 developers were affected by the Mini Shai-Hulud supply chain attack that hit the PyPi, NPM, and PHP ecosystems ...

People hacking branded AI bots can result in significant reputational, financial, and legal consequences. There appears to be ...

To put that theory into practice, I teamed up with my friend Jared Bauman, built an AI-powered poem generator, and released ...