Over 1,000 exposed ComfyUI instances exploited via unauthenticated code execution, enabling Monero mining and botnet expansion.

The financially motivated cybercriminal threat actor Storm-1175 operates high-velocity ransomware campaigns that weaponize ...

DPRK-linked actors use GitHub C2 and LNK phishing in South Korea, enabling persistent PowerShell control and data ...

On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...

AI note-taking apps try to think for you, but NotebookLM works with your sources instead, making answers easier to trust and ...

With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...

There are plenty of drones (and other gadgets) you can buy online that use proprietary control protocols. Of course, ...

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

写在最前面，2月28日通义实验室AgentScope团队发布了自研的独立部署开源桌面Agent工具：CoPawhttps://copaw.agentscope.io/CoPaw是整体架构上类似openclaw的工具，用的agentscope框架搭建， ...

报告日期：2026-02-28 关键词： Agent Skills, MCP, OpenClaw, A2A, Agentic AI, 模块化架构一、谁提出了从 Agent 到 Skills 的转变？1.1 起源：Anthropic ...

Supply chain attacks feel like they're becoming more and more common.

Shell is rapidly forging ahead with its revamped and revived $20 billion Bonga South West Aparo (BSWA) project in Nigeria, with offshore contractors having until Friday to submit their credentials to ...