Two versions of the widely used JavaScript library axios were maliciously published on npm on March 31, 2026. A hijacked ...

The popular JavaScript HTTP client Axios has been compromised in a supply chain attack, exposing projects to malware through malicious npm releases. Security researchers from StepSecurity identified ...

When researchers found an obfuscated token while examining the relationship between OpenAI Codex and GitHub, they took notice ...

A widely used JavaScript package used with hundreds of millions of downloads has been compromised in a new supply chain ...

A leaked hacking tool called DarkSword could expose older iPhones and iPads to attacks through malicious links and ...

The tool allows a hacker to steal messages, passwords, photos, location history, and even cryptocurrency wallets.

International conflicts in the physical world can lead to a spike in cyberattacks — both on government entities and on ...

A large-scale campaign is targeting developers on GitHub with fake Visual Studio Code (VS Code) security alerts posted in the ...

Threat group TeamPCP exploited credentials stolen in the Trivy breach to push malicious versions of LiteLLM to PyPI, exposing ...

Here’s what we know, and what you need to know, about Coruna and DarkSword, two advanced iPhone hacking tools discovered by ...

Securing dynamic AI agent code execution requires true workload isolation—a challenge Cloudflare’s new API was built to solve ...

Anthropic has launched auto mode for Claude Code and computer use for Cowork, expanding AI agent autonomy as revenue ...