The TeamPCP hacking group has been using credentials stolen in the recent OSS campaign to enumerate and compromise AWS ...

Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

A new info-stealing malware named Infinity Stealer is targeting macOS systems with a Python payload packaged as an executable using the open-source Nuitka compiler.

A new ClickFix attack that leverages a Nuitka loader targets macOS users with the Python-based Infiniti Stealer malware.

During a recent penetration test, we came across an AI-powered desktop application that acted as a bridge between Claude ...

Explore the shift from vibe coding to vibe research and how AI is overcoming the “carbon wall” to drive sustainable, ...

Malicious LiteLLM 1.82.7–1.82.8 via Trivy compromise deploys backdoor and steals credentials, enabling Kubernetes-wide ...

YouTuber and orbital mechanics expert Scott Manley has successfully landed a virtual Kerbal astronaut on the Mun, the in-game moon of Kerbal Space Program, using a ZX Spectrum home computer equipped ...

An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions ...

SystemRescue 13.00 is here. The Linux distribution for administrators brings a new LTS kernel and updated file system tools.

Learn how to detect compromise, assess your exposure to the LiteLLM supply chain attack, and use GitGuardian to orchestrate ...