AI Now’s Friendly Fire PoC shows Claude Code and Codex running README-planted payloads on hosts when autonomous command ...

Now, you can let a simple open-source CLI module turn any command into a GUI for you instead. That’s the solution Jordanian ...

Attackers have begun embedding hidden instructions in websites to target AI agents, according to new research. Zscaler's ...

VS Code 1.127 enhances agent session management, introduces per-site browser permissions, and makes browser tools for agents ...

Omp (oh-my-pi) is a batteries-included terminal coding agent with LSP, debugger, subagents and hash-anchored edits. Here's ...

ESET Research has released its H1 2026 Threat Report with statistics from December 2025 through May 2026.ClickFix – a social ...

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

Every device has something to hide.

Sysdig says JADEPUFFER may be the first agentic ransomware case, exposing how AI agents can turn old credential failures into database destruction. JADEPUFFER is a warning about exposed AI ...

Novee Security has disclosed a critical supply chain flaw it calls Cordyceps. It describes a GitHub Actions workflow-automation pattern that can let low-trust pull request activity reach high-trust CI ...

Google has released A2UI v0.9, a framework-agnostic standard for AI agents to declare user interface intent across multiple ...

OpenScience is an AI workbench for scientific research. You give it a goal, and it works through the research loop the way a ...