Microsoft's Linux server distribution is now available as an ISO to install on your own server or virtual machine.

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

Azure Linux 4.0 is Microsoft's own Fedora-derived Linux distro for Azure cloud workloads. Here is how it compares to Ubuntu, ...

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...

X has launched a hosted MCP server, making it easier for developers to connect AI applications with the company’s API.

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

MCP tool poisoning turns trusted AI agents into a control plane for data loss. Learn how threat actors manipulate tool ...

Claude models are now generally available in Microsoft Foundry on Azure, giving enterprises new options for AI agents and cloud deployment.

Three levels of indirection, all with seemingly innocuous steps, will catch a bot off-guard.

While Anthropic is dealing with a government-ordered suspension of its newest Fable and Mythos models, Microsoft is emphasizing a more enterprise-ready Claude path through Microsoft Foundry.

Operation Navy Ghost is targeting Python developers who build Telegram bots by hiding backdoors inside trojanized Pyrogram forks uploaded to PyPI. The campaign has been active since November 2025, ...