Publicly accessible servers exposing ARTEX AI hacking tools, exploit files, and operator data. The findings show how ...

AI code review vs SAST: how detection, bug coverage, determinism, false positives, and cost differ, and why combining them ...

OpenAI says its autonomous security agents discovered 948 distinct vulnerabilities in the Linux kernel, and developed working ...

Key Points Introduction ARTEX is a Chinese open-source, AI-powered penetration testing platform designed to help security ...

OpenClaw's Control UI trusted a gatewayUrl parameter, leaked the stored gateway token, and gave a malicious link remote code execution. Fixed in 2026.1.29.

Researchers at Sekoia say a hacking group tied to Russia's SVR ran a watering-hole campaign that infected iOS and Android phones through ...

From fake employees and job interviews to code poisoning and AI deepfakes: here's how North Korean hackers get inside crypto ...

description Deep-dive offensive methodology for dependency confusion and namespace attacks across all major package ecosystems. Covers npm scope confusion exploiting the gap between public and private ...

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: r/opensource bans AI ...

October brought a heavy run of cybersecurity disclosures involving cryptocurrency exchanges, web servers, AI tools, software ...

Volunteer-led PHP, which powers most websites, is increasingly under threat from cyberattacks using AI capabilities.

Attackers are penetrating the entire chain of trust, and Vitalik's d/acc also seeks to steer the trajectory of technological acceleration back toward defense.