Risky security flaws are found in 45% of AI-generated code tests. Here are the 5 checks that make a vibe coded app safe to ship.

The March 2026 LiteLLM supply chain attack likely affected over 2,500 organizations and exposed over 430,000 CI/CD pipelines.

Security researchers have disclosed new "Plug and Pwn" attacks that abuse the Windows Plug and Play feature to trigger Windows into installing vulnerable or insecure vendor software and gain SYSTEM ...

MAESTRO analysis of OpenAI and Anthropic incidents reveals how per-layer failures, not just the model, shaped security outcomes.

DeepSeek V4-Pro is GA with open weights, a 1M token context and three reasoning modes. Explore benchmarks, architecture and ...

LiteLLM supply chain attack exposed 2,500+ companies and 434,000 CI/CD pipelines in 40 minutes. FBI warns threat still live.

Vulnerabilities can lurk within production code for years or decades — and AI tools have opened a gateway to a glut of new long-hidden discoveries.

Development environments have evolved into toolkits for directing coding models and coordinating agents. GitHub Copilot, ...

John Meluso, assistant teaching professor in the Cornell Duffield College of Engineering's Systems Engineering Program, is lead author on a new ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

After a multi-year hiatus, the venerable BugTraq mailing list is back! For decades, BugTraq was the place where vulnerabilities were disclosed, from the early days when nearly all vendors viewed ...

SharePoint CVE-2026-55040, a critical JWT authentication bypass, is being actively exploited hours after Rapid7 published a ...