In the world of cybersecurity, lightning rarely strikes the same place twice—unless you are a high-value … The Supply Chain Nightmare: Checkmarx Compromised Again by TeamPCPRead more
CI/CD security
npm Supply Chain Attack: Hugging Face Malware Abuse Explained
The npm supply chain attack targeting the malicious package js-logger-pack demonstrates a dangerous evolution in modern … npm Supply Chain Attack: Hugging Face Malware Abuse ExplainedRead more
KICS Docker Supply Chain Attack: DevOps Secrets at Risk
A new KICS Docker supply chain attack has sent shockwaves through the DevSecOps community—proving once again … KICS Docker Supply Chain Attack: DevOps Secrets at RiskRead more
Critical Atlassian Bamboo Flaw Enables Remote Command Injection
A severe vulnerability has been disclosed in Atlassian Bamboo Data Center and Server, exposing enterprise CI/CD … Critical Atlassian Bamboo Flaw Enables Remote Command InjectionRead more
Critical Atlassian Bamboo Vulnerability: Your CI/CD Pipeline Could Be at Risk
A severe security vulnerability in Atlassian Bamboo Data Center and Server is putting enterprise CI/CD pipelines … Critical Atlassian Bamboo Vulnerability: Your CI/CD Pipeline Could Be at RiskRead more
NPM Supply Chain Attack Spreads CanisterWorm Malware
A dangerous new npm supply chain attack has emerged, compromising packages linked to Namastex.ai and delivering … NPM Supply Chain Attack Spreads CanisterWorm MalwareRead more
GitHub AI Agents Hit by Prompt Injection via Comments
A new class of AI security vulnerability is redefining how attackers compromise development pipelines. Dubbed “Comment … GitHub AI Agents Hit by Prompt Injection via CommentsRead more
Axios npm Supply Chain Attack Impacts Developers
A major software supply chain attack has struck the JavaScript ecosystem, prompting an urgent alert from … Axios npm Supply Chain Attack Impacts DevelopersRead more
Axios npm Supply Chain Attack: Detection, Risks, and Mitigation Guide
On March 31, 2026, the cybersecurity community faced a major wake-up call when a widely trusted … Axios npm Supply Chain Attack: Detection, Risks, and Mitigation Guide Read more
CanisterWorm Spreads Through npm Accounts Stealing Tokens
A new supply chain malware campaign called CanisterWorm is targeting the npm ecosystem by compromising publisher … CanisterWorm Spreads Through npm Accounts Stealing TokensRead more