… Earlier today, OpenAI also confirmed that the TanStack supply-chain impacted systems of two of its employees who had access to “a limited subset of internal source code repositories.” A small set of credentials was stolen from the repositories, but the investigation found no evidence that they wer… …
… Download Now Related Articles: Max-severity flaw in ChromaDB for AI apps allows server hijacking New Windows 'MiniPlasma' zero-day exploit gives SYSTEM access, PoC released Windows 11 and Microsoft Edge hacked at Pwn2Own Berlin 2026 18-year-old NGINX vulnerability allows DoS, potential RCE Critical… …
… OpenAI says it isolated affected systems and accounts, revoked sessions, rotated credentials across affected repositories, and temporarily restricted deployment workflows. …
… Download Now Related Articles: Shai Hulud attack ships signed malicious TanStack, Mistral npm packages Popular node-ipc npm package compromised to steal credentials TeamPCP hackers advertise Mistral AI code repos for sale OpenAI confirms security breach in TanStack supply chain attack Bitwarden CLI… …
… Claim Your Spot Related Articles: 13-year-old bug in ActiveMQ lets hackers remotely execute commands Max severity Flowise RCE vulnerability now exploited in attacks CISA: New Langflow flaw actively exploited to hijack AI workflows Fortinet warns of critical RCE flaws in FortiSandbox and FortiAuthen… …
… Download Now Related Articles: Video service Vimeo confirms Anodot breach exposed user data Checkmarx confirms LAPSUS$ hackers leaked its stolen GitHub data US govt seeks Instructure testimony on massive Canvas cyberattack Instructure reaches 'agreement' with ShinyHunters to stop data leak NVIDIA c… …
… Claim Your Spot Related Articles: PyPI package with 1.1M monthly downloads hacked to push infostealer New npm supply-chain attack self-spreads to steal auth tokens Backdoored PyTorch Lightning package drops credential stealer Hackers compromise Axios npm package to drop cross-platform malware Backd… …
… Download Now Related Articles: Exploit released for new PinTheft Arch Linux root escalation flaw Exploit available for new DirtyDecrypt Linux root escalation flaw Windows 11 and Microsoft Edge hacked at Pwn2Own Berlin 2026 Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own New Fragnesia… …
… Download Now Related Articles: Paid AI Accounts Are Now a Hot Underground Commodity Fake OpenAI repository on Hugging Face pushes infostealer malware New stealthy Quasar Linux malware targets software developers Threat actor uses Microsoft Teams to deploy new “Snow” malware WordPress plugin suite h… …
… This allowed the attacker to run workflows on our GitHub repository as a contributor," the NX team said. "According to Microsoft and OpenVSX, download numbers for the impacted 18.95.0 version were a low 28 and 41 respectively. .. …