Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a cross-platform RAT. Axios sits in 80% of cloud environments. Huntress confirmed ...

Amazon has launched a new Fire TV Stick HD. It's moving to a new operating system called Vega OS instead of the long running ...

Fake packages aim to steal data, credentials, and secrets, and to infect every package created using them, in what could be ...

How many browsers extensions do you have running? Most enterprise users have at least one and seven out of ten have seen an extension expand its permissions over the last 12 months—with AI extensions ...

Police say it’s the first time the portable devices used to mimic cellphone towers have been detected in Canada ...

The supply chain attack on third-party library Axios has forced OpenAI to revoke its code-signing certificate and require ...

FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...

This week, a "Raccoon"-linked actor hit help desks, Eurail exposed 308K users, Fortinet patched critical flaws, Pushpaganda ...

It's not even your browser's fault.

A zero-click exploit called DarkSword can silently compromise older iPhones through Safari with no user action. Devices on ...

Microsoft has embedded GitHub Copilot as a default VS Code extension in version 1.116, adding agent debug logging, terminal ...

Microsoft is publishing 167 vulnerabilities on the April 2026 Patch Tuesday, with some already facing exploitation, and more ...