HalluSquatting exploits AI coding assistants that hallucinate fake repository names, letting attackers register those names ...

xAI open-sourced its Grok Build terminal coding agent on Wednesday under the Apache 2.0 license, releasing 844,530 lines of Rust to GitHub hours after the tool's covert full-repository upload behavior ...

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...

Researchers find nine of the most popular AI platforms are susceptible to a new attack that exploits hallucinations to set up ...

An unpatched vulnerability in Cursor on Windows could allow attackers to achieve code execution via malicious repositories.

xAI's Grok Build coding CLI was uploading entire Git repositories, full commit history and all, to a Google Cloud Storage bucket run by xAI, not just the files a coding task needed. A researcher ...

Microsoft is extending Dataverse into coding-agent marketplaces while expanding its MCP tools, certification program and governance controls.

Developers have more reasons than ever to move beyond GitHub, from AI concerns to easier self-hosting and stronger ...

OpenAI launched ChatGPT Work, a new AI agent that connects to email, Slack, calendars and GitHub to automate work tasks ahead ...

Weak security controls around the use of public GitHub code repositories allowed a contractor for the Cybersecurity and ...

A new attack technique dubbed HalluSquatting turns AI assistants’ tendency to hallucinate into a scalable infection vector.