Malicious KICS Docker tags and VS Code versions 1.17.0, 1.19.0 enabled data exfiltration, risking exposed infrastructure ...
Vibe coding platforms are powerful, but users often don't know what they created.
Cybercriminals are tricking AI into leaking your data, executing code, and sending you to malicious sites. Here's how.
Security researchers have discovered 10 new indirect prompt injection (IPI) payloads targeting AI agents with malicious ...
Antigravity Strict Mode bypass disclosed Jan 7, 2026, patched Feb 28, enables arbitrary code execution via fd -X flag.
The Bitwarden CLI was briefly compromised after attackers uploaded a malicious @bitwarden/cli package to npm containing a credential-stealing payload capable of spreading to other projects.