Researchers have uncovered a supply-chain attack that hides in Python packages, propagates like a worm, and tricks LLM-based ...

The power of Python trumps Excel workbooks.

Hackers compromised 19 packages on the PyPI, collectively downloaded hundreds of thousands of times, in a new Shai-Hulud ...

AI agent exploited Salesforce sites; 263 objects, 55 Apex methods exposed at one portal, leading to PII and file leaks.

Looks like the Arch Linux AUR (Arch User Repository) needs some better security and package checks - as some malicious users ...

Cybersecurity roundup: supply chain threats, AI agent risks, browser-cloning malware, mule networks, endpoint bypasses, and ...

A new variant of the Gafgyt botnet called C0XMO is targeting DD-WRT router firmware and can move to other device types with ...

Threat actors have struck the software supply chain yet again, this time hitting the Python Package Index (PyPI) with Mini Shai-Hulud in an attempt to spread poisoned code. In the latest campaign, ...

2026 年的 Skill 工程化，已经走过了"有没有"的阶段，进入了"好不好"的深水区。掌握这个决策框架，你的 Skill 就不再是又长又模糊的 Prompt 集合，而是真正能让 Agent 从通用走向专业的工程化资产。 前言 一句话总结：Skill 不是 SOP，但好的 Skill 借鉴了 SOP 的精髓。