GitHub's npm registry shipped staged publishing in May 2026, the first mandatory 2FA human checkpoint in its 16-year history, ...

AdBlock blocks known crypto miners by default, but c/side found 3,500+ sites running stealth WebSocket miners in 2025. What each extension still misses.

Browser AI agent security research: security researcher Gal Weizman of Forever Security demonstrated that one ordinary browser extension can hijack AI agents in Chrome, Edge, Perplexity Comet, Opera ...

Anthropic says it has blocked efforts to use its artificial intelligence models to carry out cyber attacks and research which could have led to the creation of biological weapons.

On September 16, 2026, GitHub made its AI-powered Security Scan significantly easier to use.GitHub's 'AI Scan' is a feature that analyzes changes in a Pull Request (PR) using AI to identify security ...

Don't let vanilla VS Code slow you down when these five fundamental extensions can instantly upgrade your workflow ...

Report URI CSP alerts surfaced a ClickFix campaign on compromised e-commerce sites using Base64 loaders and a fake verification overlay.

2026年9月16日、GitHubがAIを使ったSecurity Scanをかなり使いやすくしました。 GitHubの「AI Scan」は、Pull Request（PR）に入った変更をAIで分析し、Security上の問題を見つける機能です。これまでは、RepositoryでCodeQLのDefault Setupを有効にしていることが前提でした。 今回の変更で、その前提がなくなりました。 Co ...

A massive cybercriminal operation is leveraging thousands of compromised small-business websites to deliver ClickFix payloads stored in smart contracts on the BNB Smart Chain (BSC).

Researchers find attackers now infect widely used package at runtime, sidestepping recent lifecycle-script restrictions entirely. chaeckmarx ## A New Evasion Technique Emerges ...

Engineer Tetsuya Wakita built vault-mcp, an open-source system that stores personal AI context in a user-owned Git repo and ...

Welcome readers! With this weekly series, we'll walk you through the top developments in AI and cybersecurity and explain why ...