Tech Times

North Korea’s Lazarus Group Hid a Full RAT in Six Rollup Polyfill npm Packages

Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...
XDA Developers on MSN

I ignored Claude Code sub-agents until my context window started collapsing

You're missing out if you're not using Claude sub-agents ...
Tech Times

GitHub Secret Scanning Now Watches All Public Repos for Leaked Enterprise Keys

GitHub secret scanning now extends beyond org-owned repositories: Public Monitoring scans all of GitHub.com in real time, ...
TMCnet

Sourcegraph Launches Agentic Batch Changes in Public Beta, Bringing AI-Powered Large-Scale Code Change to Enterprise Engineering Teams

Sourcegraph, the code intelligence platform that helps enterprise engineering teams understand, oversee, and evolve their codebases, announced public beta availability of Agentic ...
Security Boulevard

Cut your coding agent’s cost with Sonar Vortex

New benchmarks show semantic code graphs helping coding agents find change locations faster and complete updates more ...
latesthackingnews.comOpinion

Amazon Q’s MCP Flaw Is an Industry Warning: AI Tools Still Lack Workspace Trust Standards

CVE-2026-12957 in Amazon Q is the third MCP auto-execution vulnerability in three AI coding tools. The pattern reveals a ...