The Git project has addressed a critical remote code execution (RCE) vulnerability, CVE-2026-111760, that allowed malicious repositories to execute code during recursive clones. Five other security flaws were also patched.
LiteLLM has disclosed a security breach where a leaked master key on GitHub allowed attackers to hijack its release pipeline and distribute a malicious version of the Python package.
New research highlights a shift in cybercrime, with infostealers dominating credential theft and ransomware groups moving toward highly targeted, stealthy operations.
Billion-dollar companies are more than twice as likely to knowingly leave high or critical security vulnerabilities unpatched compared to smaller firms, according to new research from software supply chain security firm Chainguard.
The widespread adoption of open-weight AI models is introducing a new class of invisible and largely undetectable cybersecurity threats, including sophisticated backdoors and data poisoning. This shift challenges traditional security tooling and places significant new
