Data: CISA KEV Catalog, NVD (NIST). Both are U.S. Government public-domain feeds. Not security advice.

Introduction: Use this as a dictionary to look up symptomsI am a manager responsible for creating materials and developing internal tools at my company. I spend most of my work time using Claude Code ...

Exploitation of CVE-2026-88772 bypasses authentication and triggers an unhandled termination of the NetScaler Packet Processing Engine (NSPPE) to establish initial root-level access. Analysis of the ...

Compromised MemTensor npm and PyPI packages deliver sckit, a Go-based stealer targeting cloud, registry, source-code, and developer credentials.

Flet is testing whether Python can serve as a practical full application stack across web, desktop and mobile. Its planned Studio and Fletbase services also give Fitsner a path to build a business ...

Every agent that writes code needs somewhere to run it. That “somewhere” is now a product category with at least a dozen vendors, four incompatible billing models, and marketing pages that quote cold ...

JADEPUFFER, revealed as the first known agentic ransomware threat actor in early July, was found to have launched a subsequent attack utilizing a new payload called ENCFORGE to target and encrypt AI ...

Security researchers walked out of the sandboxes in four of the most popular AI coding tools, and they never touched the sandbox itself. The agent stays inside, follows the rules, and simply writes a ...

In standalone ChatGPT Chat, GPT-5.6 Sol Thinking in both Extra High and Pro modes repeatedly attempts to retrieve external web resources through Python, requests, curl, or shell commands executed ...

According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD environment variables. Socket’s scanning infrastructure detected 17 malicious ...

Before recently, I had never touched industrial security. I just had a standard PC, some free open-source software, and a deep curiosity about how critical infrastructure actually works under the hood ...

Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Python-based information stealer on compromised Windows, Linux, and macOS ...