Supply chain attacks feel like they're becoming more and more common.

Socket and Endor Labs discovered a new TeamPCP campaign leading to the delivery of credential-stealing malware ...

Python has made using Microsoft Excel much easier than it has ever been, and it isn't very hard to start using it yourself.

After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB ...

Google launches Gemini 3.1 Flash Live, a real-time voice AI model with faster responses, natural dialogue, and built-in ...

Malicious LiteLLM 1.82.7–1.82.8 via Trivy compromise deploys backdoor and steals credentials, enabling Kubernetes-wide ...

Threat actors abused trusted Trivy distribution channels to inject credential‑stealing malware into CI/CD pipelines worldwide ...

UTC, Aikido Security detected an unusual pattern across the npm registry: dozens of packages from multiple organizations were ...

Generative AI with .NET from SDKs and streaming to tools and agents: an overview of OpenAI, Azure, and the new Microsoft ...

The scientific evidence is clear: biological males have an advantages in sports that rely on strength, power or endurance ...

GlassWorm uses Solana and Google Calendar dead drops to deliver RAT stealing browser data and crypto wallets, impacting ...

If you suspect you were running a compromised version, treat all pipeline secrets as compromised and rotate immediately,’ ...