Socket and Endor Labs discovered a new TeamPCP campaign leading to the delivery of credential-stealing malware ...

Supply chain attacks feel like they're becoming more and more common.

After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB ...

Python has made using Microsoft Excel much easier than it has ever been, and it isn't very hard to start using it yourself.

GlassWorm attack uses stolen GitHub tokens to inject malware into Python repositories, exposing developers to supply chain ...

The International Olympic Committee (IOC) announced on Thursday that participation in the female category in the Olympic ...

Malicious LiteLLM 1.82.7–1.82.8 via Trivy compromise deploys backdoor and steals credentials, enabling Kubernetes-wide ...

Google launches Gemini 3.1 Flash Live, a real-time voice AI model with faster responses, natural dialogue, and built-in ...

Threat actors abused trusted Trivy distribution channels to inject credential‑stealing malware into CI/CD pipelines worldwide ...

Trivy attack force-pushed 75 tags via GitHub Actions, exposing CI/CD secrets, enabling data theft and persistence across ...

If you suspect you were running a compromised version, treat all pipeline secrets as compromised and rotate immediately,’ ...