The NPM package for Axios, a popular JavaScript HTTP client library, was briefly compromised this week, possibly by North ...

In 2025, Google fixed a total of eight zero-days exploited in the wild, many of which were discovered and reported by ...

Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible ...

A widely used JavaScript package used with hundreds of millions of downloads has been compromised in a new supply chain ...

North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.

With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...

Overview: Cybersecurity in 2026 requires strong knowledge of programming languages to handle advanced and AI-based threats.Python, JavaScript, and system-level ...

Up to four npm packages on Axios were replaced with malicious versions, in one of the most sophisticated supply chain attacks ...

Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...

Google Ads malvertising spreads ScreenConnect malware using Huawei driver flaw, enabling EDR bypass and credential theft in U ...

ThreatDown’s EDR team discovered a sophisticated, multi-stage attack chain during an active investigation; the first documented case of attackers abusing the Deno runtime as a malware execution ...