Australian Cyber Security Centre issues High Alert regarding a series of attacks on online code repositories, as experts ...

Plus: An investigation reveals how US tech companies reportedly helped build China’s sweeping surveillance state, and two ...

Following major supply chain attacks on NPM packages, security researchers argue for the immediate adoption of phishing-resistant authentication methods like passkeys.

An open source software supply-chain vulnerability is an exploitable weakness in trusted software caused by a third-party, ...

Hardly a week goes by that there isn’t a story to cover about malware getting published to a repository. Last week it was millions of downloads on NPM, but this week it’s something ...

So‭, ‬while the smart people were buying a whole Bitcoin for just a few hundred US dollars‭, ‬I was saying nonsense like‭: ...

The Shai-Hulud NPM worm highlights rising open-source supply chain threats. Secure builds with SBOMs, MFA, signed packages, and zero-trust defenses.

A Dune-inspired worm recently hit CrowdStrike and npm, infecting hundreds of packages. Here's what happened - and how to protect your code.

SonicWall is warning admins that recent brute force attacks on its firewall’s API service for cloud backup could have exposed ...

WatchGuard has patched a dangerous branch office and mobile VPN configuration vulnerability affecting nearly three dozen ...

A new self-replicating worm dubbed Shai-Hulud has compromised over 180 npm packages, stealing credentials and spreading ...

An apparent "Dune" aficionado is responsible for the first self-propagating attack on the npm JavaScript repository in what one security company has ...