Proactive container image security reduces vulnerabilities, lowers costs, protects systems, and enables secure scalable development environments ...

A critical security vulnerability in Langflow allows attackers to push and execute malicious code on PCs. A security patch is ...

A threat actor has used 36 malicious NPM packages posing as Strapi plugins to distribute malware targeting Redis, Docker, and ...

After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB ...

The leak provides competitors—from established giants to nimble rivals like Cursor—a literal blueprint for how to build a ...

Or, why the software supply chain should be treated as critical infrastructure with guardrails built in at every layer.

Claude Code 2.1.88 leak exposed 512,000 lines via npm error, fueling supply chain risks and typosquatting attacks.

Suspected North Korean hackers have compromised Axios, one of the most widely used JavaScript libraries in American software ...

TeamPCP is the likely cyber threat actor behind attacks on Trivy, Checkmarx, and the LiteLLM AI library — and all signs point ...

With new systems from companies like Anthropic and OpenAI, hackers can attack with greater speed. The defense is more A.I.

A new hacking group has been rampaging the Internet in a persistent campaign that spreads a self-propagating and never-before ...

How can an extension change hands with no oversight?