Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your ...

Researchers have uncovered a supply-chain attack that hides in Python packages, propagates like a worm, and tricks LLM-based code analysis systems into overlooking malicious payloads. Threat actors ...

Chatbots now place orders, code assistants push updates, and autonomous agents comb production databases while you sleep.

Recently, I've been able to output a little bit of what I've learned every day. I'm an engineer, sort of! As part of that learning, I post my study plan for the day on X every morning as a 'Daily ...

DevOps & Cloud Solutions Architect skilled in AWS, Azure, GCP, CI/CD, multi-cloud strategy, and scalable infrastructure. Let me tell you something that every professional engineer knows, but nobody ...

The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel artifacts across 19 packages in the Python Package Index (PyPI) registry, as the ...

Tenet Security hijacked Claude Code in 85% of tests via a fake Sentry error — no stolen credentials, no alerts. Datadog and ...

GitHub secret scanning now extends beyond org-owned repositories: Public Monitoring scans all of GitHub.com in real time, ...

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.