A patched OpenCode flaw could let malicious MCP servers execute code on Windows and WSL when developers initiated OAuth ...

The MALFEX-linked npm package imgdecode uses a Windows DLL to fetch and decrypt a GitHub payload before injecting it into ...

Kimi K3.1 Pro ranked fourth among 215 AI models on an independent intelligence index while Moonshot AI deliberately removed offensive cyberattack training data before releasing open weights, dropping ...

PHP releases rebuilt Windows security updates for versions 8.2 to 8.5 to patch a critical Brotli compression library flaw ...

Microsoft’s October 2026 Patch Tuesday fixes 1,413 Windows vulnerabilities, including an actively exploited security flaw, ...

OpenCode silently patched a critical RCE flaw, leaving vulnerable users unaware of the security risk, researchers at Pillar Security warned ...

GlassWorm hides malware in VS Code theme extensions, targeting developers through Visual Studio Marketplace and Open VSX.

Russian hackers wiped a Ukrainian grain logistics firm, eMudhra killed its TLS certs biz, Germany investigated the 2024 ...

Thank you for your hard work dealing with the recent string of vulnerabilities. It is difficult to stay calm when you have to ...

GTIG and Mandiant uncovered a supply chain attack targeting AOMEI Technology's update infrastructure, where attackers used short-burst configuration tampering on origin servers to deploy tools like ...

Security researchers have warned that developers using older versions of OpenCode remain exposed to a critical remote code execution vulnerability because ...