Stolen credentials produced valid Sigstore certificates, clearing 633 malicious npm packages — one of seven developer tool ...

Hundreds of packages across npm and PyPI have been compromised in a new Shai-Hulud supply-chain campaign delivering ...

Google reported the first confirmed AI-assisted zero-day exploit, raising new concerns about logic flaws, supply chain risk, ...

Google retired Vertex AI and launched Gemini Enterprise Agent Platform at Cloud Next 2026. Here is how the Build, Scale, Govern and Optimize stack actually works.

Report reveals alarming security gaps in AI agents. Capsule Security analysis finds 402,599 unique AI agent hosts are reachable from the public internet. Worse, most are deployed without default ...

In March 2026, someone hijacked a maintainer account for Axios, a JavaScript HTTP library downloaded more than 45 million ...

On May 11, the same day Google's Threat Intelligence Group disclosed the first confirmed case of attackers using AI to build ...

As AI becomes more capable of identifying vulnerabilities and analysing attacks, companies are beginning to use it for defence as well.

Sometime around the last week of May 2026, attackers uploaded poisoned packages to three of the most widely used software ...

OpenSquilla is an open-source Python AI agent with ML model routing, four-tier memory, and syscall-level sandbox isolation.

The key difference between inversion of control and dependency injection is that inversion of control requires the use of an external framework to manage resources, while dependency injection provides ...

Four supply-chain attacks hit OpenAI, Anthropic, and Meta in 50 days — none inside the model. A 7-row matrix maps what AI ...