Four vulnerabilities in CrewAI could be chained together via prompt injection for sandbox escape, remote code execution, and ...

The TeamPCP hacking group continues its supply-chain rampage, now compromising the massively popular "LiteLLM" Python package on PyPI and claiming to have stolen data from hundreds of thousands of ...

A single unauthenticated connection gives attackers a full shell; credential theft observed in under three minutes on honeypot servers.

A pro-Iranian hacking group is claiming to have hacked an account of FBI Director Kash Patel and has posted online what appear to be years-old photographs of him, along with a work resume and other ...

If you've ever searched for a car on CarGurus, your personal information could now be circulating online. A hacking group known as ShinyHunters has published what it claims are 12.4 million records ...

A defensive red-team fixture repository. Use it to check whether coding agents and skills treat issue bodies, PR templates, review comments, test output, and log files as untrusted—and whether they ...