Anthropic's Claude Code CLI had its full TypeScript source exposed after a source map file was accidentally included in ...

Oops. A 60MB source map file just leaked Anthropic's entire roadmap.

Flowise AI platform carried CVSS-10 arbitrary code flaw Vulnerability in CustomMCP node exploited in the wild Up to 15,000 ...

Hackers are exploiting a maximum-severity vulnerability, tracked as CVE-2025-59528, in the open-source platform Flowise for ...

FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...

Anthropic last month reduced the TTL (time to live) for the Claude Code prompt cache from one hour to five minutes for many requests, but said this should not increase costs despite users reporting ...

Anthropic and OpenAI just can't stay out of the news, which must be fun for their PR teams. This week, Anthropic accidentally ...

OpenAI rotated macOS code‑signing certificate after Axios supply chain breach Malicious Axios 1.14.1 pulled into app‑signing ...

The 2024 XZ incident illustrates how open-source software (OSS) has become strategic infrastructure in the global economy, ...

A credit card skimmer campaign discovered in early 2025 and still actively tracked as of April 2026 has compromised an ...

CVE-2025-59528 exploited in Flowise for over six months across 12,000+ exposed instances, enabling full system compromise.

Threat actors have started exploiting CVE-2025-59528, a critical Flowise vulnerability leading to remote code execution.