North Korean hackers are targeting open source software developers with a backdoor and an information stealer as part of a ...

Securonix uncovers the Veil#Drop malware framework, which abuses compromised websites and Google Blogspot to deploy the PureLog information stealer.

Attackers are now exploiting a maximum-severity Adobe ColdFusion vulnerability tracked as CVE-2026-48282, according to ...

Malicious npm packages mimicking Rollup polyfill tooling steal browser data, crypto wallets, and AI tool credentials in a Lazarus-linked campaign.

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

Security tooling is not written in a single language. Python powers most automation. C sits at the exploit layer. PowerShell ...

Island found dormant JavaScript injection paths in Adblock for YouTube, a Chrome extension with 10M+ installs, raising ...

Taiko confirmed on June 22 that its chain-state verification mechanism had been compromised. Blockchain security firm Blockaid flagged the exploit first, tracing the root cause to a flaw in the bridge ...

Chainguard will use AI to protect open-source code. Athena pools open-source users, developers, and maintainers. Others are also using AI to secure open-source code. As Chainguard puts it, "The gap ...

In response to an arcane but incredibly lucrative exploit discovered by Forza Horizon 6 players, Playground Games has confirmed that those who used the method to accumulate massive amounts of credits ...

Last Tuesday, Microsoft patched a vulnerability it rated as max critical in its M365 Copilot AI platform. On Monday, the researchers who discovered the vulnerability and reported it to Microsoft ...

LONDON, June 16 (Reuters) - Britain on Tuesday imposed sanctions on the banking arm of Russian firm Yandex, two other lenders and dozens of vessels ‌accused of exporting Russian oil and gas, and a ...