A large-scale software supply chain attack has forced npm to take unprecedented action, resetting thousands of … npm Resets Tokens After “Mini Shai-Hulud” Supply Chain AttackRead more
open source security
“CypherLoc” Scareware Attack Targets Millions With Fake Alerts
A widely used AI development platform has been found vulnerable to a one-click account takeover, exposing … “CypherLoc” Scareware Attack Targets Millions With Fake AlertsRead more
Critical Dify AI Flaws Enable One-Click Account Takeover
A widely used AI development platform has been found vulnerable to a one-click account takeover, exposing … Critical Dify AI Flaws Enable One-Click Account TakeoverRead more
Malicious NuGet Packages Compromise 64K+ Developer Systems
A stealthy supply chain attack is quietly spreading through the .NET ecosystem, targeting developers and build … Malicious NuGet Packages Compromise 64K+ Developer SystemsRead more
Urgent: Critical Notepad++ Flaw Exposes Private Memory
In the toolkit of any developer or system administrator, Notepad++ is a ubiquitous fixture. Known for … Urgent: Critical Notepad++ Flaw Exposes Private MemoryRead more
KICS Docker Supply Chain Attack: DevOps Secrets at Risk
A new KICS Docker supply chain attack has sent shockwaves through the DevSecOps community—proving once again … KICS Docker Supply Chain Attack: DevOps Secrets at RiskRead more
NPM Supply Chain Attack Spreads CanisterWorm Malware
A dangerous new npm supply chain attack has emerged, compromising packages linked to Namastex.ai and delivering … NPM Supply Chain Attack Spreads CanisterWorm MalwareRead more
Axios npm Supply Chain Attack Impacts Developers
A major software supply chain attack has struck the JavaScript ecosystem, prompting an urgent alert from … Axios npm Supply Chain Attack Impacts DevelopersRead more
AI-Powered Exploits Are Collapsing the Patch Window
Cybersecurity has always been a race between discovery and exploitation. But that race is changing shape. … AI-Powered Exploits Are Collapsing the Patch WindowRead more
PHP Composer Vulnerability Exposes Developers to Command Injection Attacks
The recent PHP Composer vulnerability has raised serious concerns across the global development and DevSecOps community. … PHP Composer Vulnerability Exposes Developers to Command Injection AttacksRead more