OpenAI confirmed on Wednesday that it found no evidence suggesting user data was compromised following a security incident ...
In March 2026, someone hijacked a maintainer account for Axios, a JavaScript HTTP library downloaded more than 45 million ...
Hundreds of packages across npm and PyPI have been compromised in a new Shai-Hulud supply-chain campaign delivering ...
Over 170 TanStack, Mistral AI, OpenSearch, UiPath, and other packages were affected in a new Mini Shai-Hulud supply chain ...
A critical vulnerability in the Cline Kanban server has been disclosed that allows any website a developer visits to silently ...
TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...
Cybercriminals created a zero-day exploit with AI, the first example of artificial intelligence finding and hacking software ...
A new Linux zero-day exploit, named Dirty Frag, allows local attackers to gain root privileges on most major Linux ...
What happened?: Attackers took over a maintainer account for Axios and published malicious versions to npm, potentially impacting millions of downloads. Why it matters: CSA Singapore warns supply ...
Admins with Dynamics 365 on-prem should also take note of a “severe” vulnerability that allows remote code execution.
A new wave of the Mini Shai-Hulud campaign compromised dozens of TanStack npm packages as part of a broader supply chain ...
OpenAI said its new Daybreak initiative uses AI to help companies identify software vulnerabilities and speed up cyber ...