The North Korean threat actor behind the Axios supply chain attack has been targeting high-profile Node.js maintainers.

Fortinet issues emergency patches for CVE-2026-35616, a FortiClient EMS zero-day vulnerability that has been exploited in the ...

Threat actors can use malicious web content to set up AI Agent Traps and manipulate, deceive, and exploit visiting autonomous ...

A threat actor has used 36 malicious NPM packages posing as Strapi plugins to distribute malware targeting Redis, Docker, and ...

The FBI has issued a warning to users of foreign-made mobile applications about the potential data security risks.

Cisco has patched eight critical and high-severity vulnerabilities that could lead to bypasses, code execution, and privilege ...

European Commission disclosed a data breach after hackers published information stolen from AWS using a key compromised in ...

Depthfirst has raised $80 in Series B funding and launched its first in-house security model to secure cryptocurrency smart ...

Google has announced a Chrome 146 update that patches 21 vulnerabilities, including a zero-day that has been exploited in the ...

North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.

In January 2026, a threat actor hacked the hospital’s internal network and stole personal and health information.

After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB ...