Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...
Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.
Researchers are warning that the VECT 2.0 ransomware has a problem in the way it handles encryption nonces that leads to ...
Threat hunters are warning that the cybercriminal operation known as VECT 2.0 acts more like a wiper than a ransomware due to ...
Boost Security has announced SmokedMeat, an open source red team framework for CI/CD pipelines that shows how attackers ...
Congress passed the Jeffrey Epstein files law in November after then-Attorney General Pam Bondi reneged on a promise to ...
Over 70 clones of popular extensions published to the Open VSX marketplace in April are likely designed to deliver GlassWorm ...
New tracking sites make it easier to follow immigration and enforcement, but journalists still need to verify what they find ...
Researchers uncover a malicious npm dependency linked to an AI‑assisted code commit that steals sensitive data and exposes ...