Explore emerging attack methods, evolving AI-driven threats, supply chain risks, and strategies to strengthen defenses and ...

Australian Cyber Security Centre issues High Alert regarding a series of attacks on online code repositories, as experts ...

Plus: An investigation reveals how US tech companies reportedly helped build China’s sweeping surveillance state, and two ...

Following major supply chain attacks on NPM packages, security researchers argue for the immediate adoption of phishing-resistant authentication methods like passkeys.

An open source software supply-chain vulnerability is an exploitable weakness in trusted software caused by a third-party, ...

Hardly a week goes by that there isn’t a story to cover about malware getting published to a repository. Last week it was millions of downloads on NPM, but this week it’s something ...

So‭, ‬while the smart people were buying a whole Bitcoin for just a few hundred US dollars‭, ‬I was saying nonsense like‭: ...

The Shai-Hulud NPM worm highlights rising open-source supply chain threats. Secure builds with SBOMs, MFA, signed packages, and zero-trust defenses.

A Dune-inspired worm recently hit CrowdStrike and npm, infecting hundreds of packages. Here's what happened - and how to protect your code.

A new self-replicating worm dubbed Shai-Hulud has compromised over 180 npm packages, stealing credentials and spreading ...

An apparent "Dune" aficionado is responsible for the first self-propagating attack on the npm JavaScript repository in what one security company has ...

Reports surfaced that the widely used npm package @ctrl/tinycolor had been compromised by Wormable Malware as part of a ...