Supply chain attacks feel like they're becoming more and more common.

Malicious telnyx 4.87.1/4.87.2 on PyPI used audio steganography March 27, 2026, enabling cross-platform credential theft.

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

A cyber attack hit LiteLLM, an open-source library used in many AI systems, carrying malicious code that stole credentials ...

AI chatbots make it possible for people who can’t code to build apps, sites and tools. But it’s decidedly problematic.

North Korean hackers used an updated version of a known backdoor to target a popular npm package.

Updated: Hijacked maintainer account let attackers slip cross-platform trojan into 100M-downloads-a-week Axios ...

Build your first fully functional, Java-based AI agent using familiar Spring conventions and built-in tools from Spring AI.

Generative AI with .NET from SDKs and streaming to tools and agents: an overview of OpenAI, Azure, and the new Microsoft ...

The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute ...

Overview Recently, NSFOCUS Technology CERT detected that the GitHub community disclosed that there was a credential stealing program in the new version of LiteLLM. Analysis confirmed that it had ...

GL Communications Inc., a global provider of voice testing solutions, announces significant enhancements to its SIP testing ...