Self-propagating npm worm steals tokens via postinstall hooks, impacting six packages and expanding supply chain attacks.

Cybersecurity researchers have identified 22 new vulnerabilities in popular models of serial-to-IP converters from Lantronix ...

One group of hackers used AI for everything from vibe coding their malware to creating fake company websites—and stole as ...

A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer credentials and attempting to spread through packages published from compromised accounts.

I’ve been following your AI Lab newsletter and really appreciate your insights on open-source AI and agent-based ...

OpenAI has released Privacy Filter: a small, free model that masks sensitive info before you paste it into an AI chatbot.

Software used for submitting anonymous tips in schools was hacked, exposing sensitive records on issues such as potential ...