2026年5月13日～19日にアメリカ、カリフォルニアで開催されたPythonの年次国際カンファレンス 「PyCon US 2026」 に参加してきたので、その様子を2回にわたってレポートします。 PyCon US 2026とは PyCon ...

Cordyceps, a systemic class of exploitable CI/CD vulnerabilities, allows unauthenticated attackers to hijack developer ...

JFrog found malicious npm packages that deploy a Windows RAT to steal Chrome credentials, run commands, and transfer files.

A previously undocumented malware botnet named AryStinger has compromised more than 4,000 outdated routers to turn them into ...

CI/CD pipelines are optimized for code deployments. Long-running operational processes and self-service workflows can be ...

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your ...

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...

オープンソースを推進する非営利団体Eclipse Foundationは6月17日（米国時間）、「Open VSX」がv1.0.0に到達したと発表した。機能面もさることながら、長年のコミュニティ貢献・協力の結晶としての大きな節目となっている。

The Meta-Harness Omnigent combines AI agents like Claude Code and Codex under a common policy and collaboration layer – under ...

A reverse shell makes the target machine initiate the connection back to the attacker, bypassing firewalls that only filter ...

A three-CVE chain lets any default LiteLLM user escalate to admin and get a shell on the gateway server. A separate RCE is ...

Three LiteLLM flaws let low-privilege users gain admin access and run code, exposing AI keys, secrets, prompts, and responses ...