A critical vulnerability in the popular expr-eval JavaScript library, with over 800,000 weekly downloads on NPM, can be ...

Cybersecurity researchers have uncovered critical remote code execution vulnerabilities impacting major artificial ...

A widely-adopted JavaScript library has been found carrying a critical vulnerability which could allow threat actors to execute malicious code, remotely.

A new proof-of-concept attack shows that malicious Model Context Protocol servers can inject JavaScript into Cursor’s browser ...

Weeks after being declared eradicated, GlassWorm is again infesting open source extensions using the same invisible Unicode ...

Over the last month, Barracuda threat analysts have seen the following notable developments in email-based threats targeting ...

What if AI-assisted development is less of a threat, and more of a jetpack? This month’s report tackles vibe coding, along ...

The coordinated campaign has so far published as many as 46,484 packages, according to SourceCodeRED security researcher Paul ...

ClickFix attacks have evolved to feature videos that guide victims through the self-infection process, a timer to pressure ...

"Vibe coding" appeared in early 2025 to describe the simple idea of programming with AI tools. So I tested a range of them — ...

The Jupyter extension brings Jupyter Notebook functionality into VS Code. It lets you create, open, and edit .ipynb files ...