Two fake spellchecker packages on PyPI hid a Python RAT in dictionary files, activating malware on import in version 1.2.0.

A critical Grist-Core flaw (CVE-2026-24002, CVSS 9.1) allows remote code execution through malicious formulas when Pyodide ...

ChatGPT has quietly gained bash support and multi-language capabilities, enabling users to run commands and install packages in containers without official announcements.

Knostic found 1,862 MCP servers exposed with zero authentication. Here are five actions CISOs should take now.

Anthropic is quietly testing new Claude updates, including a Plugins section, Sketch attachments, and Cowork tasks in ...

What's new? Manus AI integrates Agent Skills on all platforms with team plan early access; Agent Skills offers modular ...

A critical sandbox escape vulnerability in Grist-Core has been disclosed that allows remote code execution (RCE) through a ...