A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana ...
Pluto Security's research team on October 29, 2026 published its Load/Mine report, disclosing a cryptomining and backdoor ...
A Hugging Face model loaded with trust_remote_code ran a cryptominer, and in some builds a reverse shell. Every scanner ...
Pluto Security tracks a Hugging Face cryptominer campaign using malicious Qwen2 models, Python loaders, reverse shells, and ...
Microsoft's latest monthly security update addresses 1415 vulnerabilities across multiple products. One vulnerability ...
Hello, this is DreamTact DX Solutions.One week after the emergency PHP update, a critical vulnerability has been discovered in 'Brotli,' a data compression mechanism created by Google.You might think, ...
Multiple tech companies and projects have recently pushed patches for a vulnerability called "HTTP2Shell" which could enable remote code execution (RCE) attacks, similar to the recent "PHP2Shell" ...
A practical checklist for evaluating ADLC security solutions: coverage for code and coding agents, evidence-backed accuracy, agent-loop workflow fit, and a proof of concept you can score.
Ollama now lets Mac users turn text into natural-sounding speech locally with Phonon, a family of small text-to-speech models from Gradium. No subscription required.
The PHP team has released updated Windows builds to fix a serious flaw known as HTTP2Shell. The new packages are PHP 8.5.12-1 ...
Critical RCE flaws, millions of exploit attempts, rogue AI agents, supply chain attacks, leaked keys, and more.
Honeypot data shows attackers successfully exploiting the PHP2Shell vulnerabilities to execute shell commands on PHP servers.