Kaspersky reports ToddyCat’s Umbrij abuses headless Chromium and OAuth flows to extract Gmail authorization codes, enabling ...

Gemini Spark Mac beta lands on the existing Gemini desktop app, letting Google’s autonomous AI agent sort local files, ...

VS Code 1.127 enhances agent session management, introduces per-site browser permissions, and makes browser tools for agents ...

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

OpenAI brought Codex Remote to general availability on June 25, 2026, opening phone-based control of long-running AI coding sessions to every paid ChatGPT subscriber — Plus, Pro, Business, Enterprise, ...

For most companies, being sued is stressful enough — but where the lawsuit lands can shape the odds. In patent cases, a federal statute ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is giving federal agencies until Sunday to patch a ...

Z.ai has launched ZCode, a free AI coding tool powered by GLM-5.2 that challenges Cursor, Claude Code and GitHub Copilot ...

Malicious npm packages mimicking Rollup polyfill tooling steal browser data, crypto wallets, and AI tool credentials in a Lazarus-linked campaign.

In April, according to a Department of Justice press releaseOpens a new window , two U.S. citizens were sentenced to seven ...

Infosecurity spoke with the researcher who dumped over 30 proof-of-concept exploits without disclosing the vulnerabilities ...

Mozilla’s 0din team showed how a Claude Code malware GitHub repo attack could use a clean-looking repository to open a ...