TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...

Claude without MCP is only half the story.

Hackers have injected credential-stealing malware into newly published versions of node-ipc, a popular inter-process communication package, in a new supply chain attack targeting npm. The node-ipc ...

A known Belarussian cyber-espionage group is back with a threat campaign against targets in Eastern Europe that uses spear-phishing to deliver malicious payloads to Eastern European government and ...

TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...

A security flaw in “Claude in Chrome” enables any Chrome extension, including those without permissions, to execute ...

Technology that helps write computer code is not new, but advances in generative AI (GenAI) and agentic AI have catapulted ...

Company expects Ontario Securities Commission to issue a failure to file cease trade order that would prohibit trading in its securities in Canada ...

Thousands of software development teams whose CI/CD pipelines depended on LocalStack’s free community edition lost access to ...

Cybersecurity researchers are sounding the alarm about what has been described as "malicious activity" in newly published ...

The Israeli military previously said it hit a "Hezbollah target" near Lebanon’s largest public hospital - adding that the ...

A poisoned open-source dependency let attackers breach two OpenAI employee devices and steal credentials from a limited set of its internal source code repositories, OpenAI confirmed in a May 14, 2026 ...