Google is rolling out Skills to the Gemini sidebar in Chrome, letting you save any prompt—as simple as "summarize this tab" ...

FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...

Oracle WebLogic operators are under pressure to close a critical security gap after attackers began probing and exploiting a newly disclosed flaw on the same day public exploit code appeared, ...

Alpaca rolled out version 2 of its MCP Server, marking overhaul of platform that connects artificial intelligence assistants ...

The CVSS‑9.3 vulnerability allows unauthenticated remote code execution on exposed Marimo servers and was exploited in the wild shortly after disclosure, Sysdig says.

Despite tariffs and parts shortages, the server market reached a record $125.3 billion dollars in revenue during the fourth quarter of 2025, driven by the accelerated investment in AI Infrastructure, ...

The maintainer account for the axios package on npm was compromised to inject a remote access trojan for Windows, macOS, and Linux.

On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...

PM This week in cybersecurity: botnets, RCE flaws, AI-driven attacks, stealers, and more. Fast, no-fluff roundup.

Strapi plugins exploit Redis and PostgreSQL via postinstall scripts, enabling persistent access and data theft.

Truelist releases 20+ free, open-source SDKs and framework integrations for email validation — Node, Python, React, ...