JFrog disclosed CVE-2025-6514, a critical vulnerability in the mcp-remote project that allows for remote code execution.

Vibe Loop is a tight, AI-native feedback cycle of writing code, observing it in production, learning from it, and improving ...

Sonatype published its Open Source Malware Index for Q2 2025, finding 16,279 new malicious open source packages.

Cloudflare explained that by switching to a permission-based model, it is eliminating the need for content owners to manually configure settings in order to opt out.