A trojanized NuGet typosquat targets Digitain's FG-Crash backend, rigs live game results, and later versions exfiltrate them ...

AWS fixed a Kiro prompt injection chain that rewrote mcp.json and launched attacker-controlled code with developer privileges ...

AWS Kiro prompt injection flaw let hidden web page text rewrite the IDE’s MCP configuration file and silently execute ...

Microsoft's latest weekly VS Code release advances shared agent sessions, multi-file change review, chat visibility and terminal navigation ...

Meta Astryx design system is back on GitHub Trending, with a JSON manifest CLI that gives AI coding agents a machine-readable contract for every command — eliminating the prop hallucination that ...

Connect all your configuration files and autogenerate code—Jsonnet is the missing piece for large code bases.

Cisco’s Antares AI models localize potentially vulnerable code files on premises, but benchmark limits mean security teams still need human review.

A company building betting software was targeted with a rather sneaky trojan.

Gemini Notebook is a research assistant that can help you make sense of your messiest notes or other sources. It's great as a ...

A decades-old Unix symlink trick fools six AI coding assistants, including Claude Code, into writing SSH keys and shell ...

The flaw affects WordPress Core’s REST Batch API, allowing unauthenticated attackers to execute code on vulnerable sites.