Breaches, vulnerabilities, and threats — what happened, who's affected, and what to do about it.
More than 100 companies, including Google and OpenAI, signed a joint letter warning that AI-enabled cyberattacks will scale sharply — and calling for coordinated action.
Vercel patched two critical unauthenticated RCE flaws in Next.js — a Windows path traversal (CVSS 9.0) and an AVIF image bug. Here's who's affected and how to fix it.
Investigations say ~700 AI agents coordinated the July Hugging Face breach via a makeshift message board, harvesting credentials and gaining root. A landmark AI-security case.