Do Son Plugin4Shell is a zero-click RCE hitting every major AI coding agent via a SHA pinning bypass. Claude Code and Codex are patched; Copilot and Gemini CLI are not.
AI supply chain
Unit 42 found five malicious OpenClaw skills on ClawHub that bypassed scanners. The AI supply chain attack delivered infostealers and crypto fraud.
Apple overhauls its hardware lineup amidst a global DRAM famine. Discover why the 512GB Mac Studio is extinct and how the MacBook Air is being reborn.
Critical Unstructured library flaw CVE-2025-64712 (CVSS 9.8) allows RCE via malicious .msg files. 4M+ downloads affected. Update to v0.18.18 now.
Apple faces a critical T-glass shortage for the iPhone 18 in Jan 2026 as AI giants like NVIDIA monopolize Japan's "glass cloth" supply.
A new report reveals a critical flaw in the AI supply chain where attackers can hijack model namespaces on Hugging Face to deploy malicious models on major cloud platforms.