Companies are treating these repositories like content delivery networks - now the Linux Foundation and colleagues are saying ...

Microsoft Threat Intelligence said attackers placed malicious code inside a Mistral AI download distributed through a Python ...

OpenAI says malware tied to the Shai-Hulud supply chain attack accessed internal repositories after infecting two employee ...

The repository reached the #1 trending position on Hugging Face within 18 hours, highlighting how public AI repositories are ...

Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a vulnerability in the developers’ account workflow that gave access to its signing keys ...

New research exposes how prompt injection in AI agent frameworks can lead to remote code execution. Learn how these ...

Fake OpenAI Privacy Filter hit #1 on Hugging Face with 244,000 downloads, spreading infostealer malware to Windows users.

Hugging Face hosts 352,000 unsafe model issues. ClawHub's registry contains 341 malicious AI agent skills. The AI supply chain is now the most attractive target in software security.

Video face swap with VidMage Try It Now A few years ago, swapping a face in a video meant either academic Python scripts ...

This was not a case of stolen credentials, but rather of vulnerability exploitation.

If you are building a simple dashboard or a form-based application, the traditional JSON API (REST or GraphQL) approach is ...

Google says attackers are using AI for zero-day research, malware development, reconnaissance, and access to premium AI tools ...