Hackers have injected credential-stealing malware into newly published versions of node-ipc, a popular inter-process communication package, in a new supply chain attack targeting npm. The node-ipc ...

A known Belarussian cyber-espionage group is back with a threat campaign against targets in Eastern Europe that uses spear-phishing to deliver malicious payloads to Eastern European government and ...

A security flaw in “Claude in Chrome” enables any Chrome extension, including those without permissions, to execute ...

TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...

TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...

Company expects Ontario Securities Commission to issue a failure to file cease trade order that would prohibit trading in its securities in Canada ...

Technology that helps write computer code is not new, but advances in generative AI (GenAI) and agentic AI have catapulted ...

Thousands of software development teams whose CI/CD pipelines depended on LocalStack’s free community edition lost access to ...

Your dream product could be a few prompts away.

Silver Fox spreads ABCDoor via 1,600 phishing emails in 2026 targeting India and Russia, enabling data theft and remote ...

A developer has created Telegram Drive, an open-source desktop app that turns Telegram into a cloud storage system, offering file management features without subscription costs tied to traditional ...

Two people have since been arrested.