Regtech firm SlowMist noted that recently, the NPM ecosystem experienced another large-scale package poisoning incident.

As holiday shopping peaks, experts warn about e-skimming — malicious JavaScript code injected into legitimate e-commerce sites to steal customers’ payment ...

Now, we're back with Opus 4.5. Anthropic, the company behind Claude claims, and I quote, "Our newest model, Claude Opus 4.5, is available today. It's intelligent, efficient, and the best model in the ...

ClickFix has become hugely successful as it relies on a simple yet effective method, which is to entice a user into infecting ...

New ClickFix attack variants have been observed where threat actors trick users with a realistic-looking Windows Update ...

PostHog says the Shai-Hulud 2.0 npm worm compromise was "the largest and most impactful security incident" it's ever experienced after attackers slipped malicious releases into its JavaScript SDKs and ...

Shai-Hulud malware infiltrates 490 NPM packages, stealing API keys and credentials from ENS and major crypto development ...

CrowdStrike shows Chinese AI DeepSeek-R1 quietly weakens code security when prompts mention Tibet, Uyghurs, or Falun Gong.

The latest version also executes malicious code during the preinstall phase, and is bigger and faster than the first wave, ...

One-Click Publishing Eliminates the Gap Between AI Code Generation and Live Deployment San Francisco, CA – November 26, 2025 ...

Researchers discovered that adding instructions for AI-powered browser assistants after the hash (#) symbol inside URLs can ...

Sha1-Hulud malware is an aggressive npm supply-chain attack compromising CI/CD and developer environments. This blog addresses frequently asked questions and advises cloud security teams to ...