The typosquatted “@acitons/artifact” package targeted GitHub’s CI/CD workflows, stealing tokens and publishing malicious ...

"Hugging Face tokens are notorious for allowing access to private AI models," said Berkovich. "The leaked Hugging Face token belonging to an AI 50 company could have exposed access to ~1,000 private ...

Microsoft CEO Satya Nadella says the company will resume hiring after employees complete a year-long transition to AI-powered ...

On Thursday, Ajit Varma, VP and head of product management at Firefox, announced but did not yet launch AI Window, an opt-in ...

A malicious extension was published on Microsoft ’s official VS Code marketplace, and was able to remain there for some time ...

After a year of major layoffs, Microsoft is preparing to grow its workforce again -- but this time with a clear focus on artificial intelligence.

GitHub will enforce 2FA and deprecate legacy tokens to improve package publishing security Trusted Publishing will expand, and token-based publishing will be restricted by default Shai-Hulud worm ...

A new proof-of-concept attack shows that malicious Model Context Protocol servers can inject JavaScript into Cursor’s browser ...

Google has seen several new and interesting ways in which malware has been leveraging artificial intelligence.

When it comes to cybersecurity, are we our own worst enemies? This past week showed us that you can patch software—but you ...