Open WebUI, an open-source, self-hosted web interface for interacting with local or remote AI language models, carried a high ...

The key themes that defined the year behind us will also shape the one ahead. The most-read articles of 2025 tracked a return ...

These startups reimagined browser security, pioneered application security for AI-generated code, and are building consensus ...

The bug allows attacker-controlled model servers to inject code, steal session tokens, and, in some cases, escalate to remote ...

The popular tool for creating no-code workflows has four critical vulnerabilities, one with the highest score. Admins should ...

Hackers behind the Shai Hulud malicious npm JavaScript campaign are likely testing a new variant of the malware. Security ...

December 2025, the RondoDox botnet operators have been targeting Next.js servers impacted by the React2Shell vulnerability.

Cybercriminals use ErrTraffic tool to automate malware distribution through fake browser error messages, with attacks ...

A newly discovered third variant of the Shai Hulud malware is raising fresh concerns about the security of the open-source software supply chain, as researchers warn that the latest version shows more ...

A new wave of the GlassWorm malware is now targeting macOS developers by hiding malicious code inside fake Visual Studio Code ...

A fourth wave of the "GlassWorm" campaign is targeting macOS developers with malicious VSCode/OpenVSX extensions that deliver ...