OpenAI said on Thursday it will acquire Astral, as the ChatGPT maker doubles down on artificial intelligence-powered coding tools to compete more aggressively with rivals such as Anthropic. The ...

A malicious Python package masquerading as a legitimate Telegram development tool has been identified as a vehicle for remote code execution attacks, raising concerns about supply chain security ...

The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...

ClickFix campaigns spread MacSync macOS infostealer via malicious Terminal commands since Nov 2025, targeting AI tool users ...

Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...

A fake $TEMU crypto airdrop uses the ClickFix trick to make victims run malware themselves and quietly installs a remote-access backdoor.