EXCLUSIVE For the past 90 days, Microsoft has been quietly patching a firmware flaw in Surface devices that allowed the ...

Attackers hijacked 400+ Arch Linux AUR packages to run a Rust credential stealer, with optional eBPF rootkit support on root ...

Multiple npm supply chain attacks used 50+ poisoned packages to spread IronWorm, a Rust-based stealer, and a Miasma worm ...

Homebrew 6.0.0 shipped June 11 with tap trust, a mechanism that blocks arbitrary Ruby code from third-party taps until ...

Chinese nation-state threat actors are targeting specific organizations in the Czech Republic and Taiwan for data exfiltration, with a focus on well-defined verticals: government and the public sector ...

The AlmaLinux team has released AlmaLinux 10.2 "Lavender Lion" today, bringing Btrfs boot support, x86-64-v2 architecture options, re-enabled frame pointers, and native SPICE support for client ...

A cryptocurrency-stealing malware campaign has been spreading by faking its own popularity, dressing up booby-trapped "tools" ...

A former Matlock writer has filed a lawsuit against CBS over alleged racist and sexual comments connected to the Kathy ...

Red Hat hit by npm supply‑chain attack - here's how to stay safe ...

Explore the new sampling profiler in Python 3.15, dive into no-impact Python profiling with the tprof library, see how Mojo 1.0 is taking shape, and more in our latest Python Report. The first beta ...

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...