Vulnerabilities can lurk within production code for years or decades — and AI tools have opened a gateway to a glut of new long-hidden discoveries.

The March 2026 LiteLLM supply chain attack likely affected over 2,500 organizations and exposed over 430,000 CI/CD pipelines.

Security researcher Kevin Beaumont got a call last week from a major US technology company that insisted it had nothing to worry about: all the credentials stolen in March's LiteLLM supply chain ...

Security researchers found that in less than 60 seconds, they could open a hatch on a plane’s exterior, plug in a tiny device, and redirect the aircraft’s autopilot or sabotage its flight plan.

There's a whole new world of homebrew to discover.

What makes a college degree "safe" today? Discover the majors that combine strong demand, transferable skills, and lasting ...

NuGet API key expiration 2026: Microsoft caps new NuGet.org API keys at 30 days starting August 17, forcing all existing keys ...

That was the day OpenAI announced a new sort of bot, known as a “reasoning model,” that was trained to complete challenging tasks that took long periods of time—the very sorts of science, math, and ...

Irregular became the common link in AI security incidents involving OpenAI, Anthropic and Meta. Here’s what actually went wrong.

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Cyber, an "offense-grade" hacking model, days after pausing Astra for nearing "Critical" cyber capability. This seemingly contradictory move highlights that the dividing line is a rigorous vetting ...

After a multi-year hiatus, the venerable BugTraq mailing list is back! For decades, BugTraq was the place where vulnerabilities were disclosed, from the early days when nearly all vendors viewed ...