Meta pauses Mercor partnership after a major data breach raises concerns over exposure of sensitive AI training data.

Meta has indefinitely paused work with $10B AI data startup Mercor after a LiteLLM supply chain attack exposed training ...

Coda One, a London-based AI startup, has launched a free online platform combining 59 AI writing, PDF, image, and developer ...

Google's March core update is rolling out. Illyes explains Googlebot's crawling architecture, and Gemini referral traffic ...

Malicious telnyx 4.87.1/4.87.2 on PyPI used audio steganography March 27, 2026, enabling cross-platform credential theft.

The compromised packages, linked to the Trivy breach, executed a three‑stage payload targeting AWS, GCP, Azure, Kubernetes ...

Google's Gary Illyes published a blog post explaining how Googlebot works as one client of a centralized crawling platform, ...

This weekly recap, “Best of the Worst,” is the companion piece. Every Friday, I’ll summarize the attacks we published that ...

Malicious LiteLLM 1.82.7–1.82.8 via Trivy compromise deploys backdoor and steals credentials, enabling Kubernetes-wide ...

The open-source tool promises hands-free automation, but users may find it costly, complex, and less practical than expected.

Indirect prompt injection represents a more insidious threat: malicious instructions embedded in content the LLM retrieves ...

UTC, Aikido Security detected an unusual pattern across the npm registry: dozens of packages from multiple organizations were ...