GitHub confirmed attackers stole 3,800 internal repositories via a poisoned VS Code extension. The same threat group, TeamPCP ...

Attackers are increasingly abusing Microsoft’s legacy MSHTA utility to silently deliver malware, stealers, and persistent ...

The Essential Cloud for AI™, today announced CoreWeave Sandboxes, an execution layer that gives AI researchers and platform ...

Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a vulnerability in the developers’ account workflow that gave access to its signing keys ...

Hundreds of packages across npm and PyPI have been compromised in a new Shai-Hulud supply-chain campaign delivering ...

Attackers compromised the official Mistral AI Python package on PyPI along with hundreds of other widely-used developer packages, exposing GitHub tokens, cloud credentials, and password vaults across ...

TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...

A single line of Python code was all it took. Developers who ran import lightning after installing versions 2.6.2 or 2.6.3 of the PyTorch Lightning package from PyPI triggered a hidden credential ...

The rise of AI services, rapid software updates and unseen third-party data flows is exposing the limits of annual vendor reviews and static security attestations.

On Wednesday, a survey of 700 software engineering leaders across five countries found that AI coding tools have transformed ...

Sometime around the last week of May 2026, attackers uploaded poisoned packages to three of the most widely used software ...

Could These 3 New-to-Market Quantum Computing Firms Threaten D-Wave? Horizon Quantum Computing Pte. (NASDAQ:HQ) used its appearance at Needham & Company's 21st annual Technology, Media, & Consumer ...