Critical vulnerabilities in four widely used VS Code extensions could enable file theft and remote code execution across 125M ...

Three of the four vulnerabilities remained unpatched months after OX Security reported them to the maintainers.

Living organisms share an ancestor called the last universal common ancestor, or LUCA. LUCA is estimated to have lived ...

Vulnerabilities with high to critical severity ratings affecting popular Visual Studio Code (VSCode) extensions collectively downloaded more than 128 million times could be exploited to steal local ...

The company identified over 100,000 prompts it suspects were intended to extract proprietary reasoning capabilities.

SmartLoader campaign spreading StealC via a trojanized Oura MCP server using fake GitHub forks to steal credentials and ...

A multi-stage malware loader known as OysterLoader has continued to evolve into early 2026, refining its command-and-control (C2) infrastructure and obfuscation methods.

Memo to House China committee cites obfuscated methods, chip scrutiny, and 2.8 million H800 GPU hours for R1 training.

Hundreds of popular add‑ons used encrypted, URL‑sized payloads to send search queries, referrers, and timestamps to outside servers, in some cases tied to data brokers and unknown operators.

OpenAI has warned U.S. lawmakers that Chinese artificial intelligence startup DeepSeek is targeting ‌the ChatGPT maker and ...

In the memo, sent Thursday to the House Select Committee on China, OpenAI said that DeepSeek had used so-called distillation techniques as part of “ongoing efforts to free-ride on the capabilities ...