I ended up testing five Figma replacements—Lunacy, Excalidraw, Plasmic, Inkscape, and Penpot over the course of three weeks.

A new iteration of the Shai-Hulud malware that ran through npm repositories in September is faster, more dangerous, and more destructive, creating huge numbers of malicious repositories, compromised ...

ToddyCat upgrades tools like TCSectorCopy and TomBerBil to steal corporate email and browser data, targeting Outlook and ...

A new version of the Shai-Hulud worm has infected hundreds of npm packages and caused disruption to global CI/CD workflows ...

It's been around for 14 years, and at least one of the newly disclosed bugs, a path-traversal flaw now tracked as CVE 2025-12972, has left cloud environments vulnerable for more than 8 years, ...

Microsoft admits AI agents in Windows 11 can fall for new security attacks. Yet, the company is pushing ahead for full ...

Simulators overcome hardware limits, helping you prototype faster and smarter with open-source tools. Explore three powerful ...

Nest’s design is philosophically inspired by Angular. At its heart is a dependency injection (DI) engine that wires together ...

Hundreds of trojanized versions of well-known packages such as Zapier, ENS Domains, PostHog, and Postman have been planted in ...

Andrej Karpathy’s weekend “vibe code” LLM Council project shows how a simple multi‑model AI hack can become a blueprint for ...

The new ToddyCat tooling shifts the group’s focus from browser theft to extracting Outlook mail archives and Microsoft 365 ...

Flaws in Fluent Bit could let attackers inject fake logs, reroute telemetry, and execute arbitrary code across cloud ...