Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and ...

CVE-2026-31431 CVSS 7.8 flaw since 2017 enables root via 732-byte exploit, impacting major Linux distributions.

Several npm packages for SAP's cloud application development ecosystem have been compromised as TeamPCP's supply chain ...

Socket’s acquisition of Secure Annex extends software supply-chain security beyond open-source dependencies into browser and ...

The 2026 picoCTF season is officially underway, bringing with it a fresh set of challenges that test both Python proficiency and cybersecurity intuition. Meanwhile, the February 2026 International AI ...

More than 1,600 malicious messages from the China-backed APT group deliver the previously undocumented ABCDoor backdoor and ...

Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal ...

A high-severity Linux vulnerability, “Copy Fail” (CVE-2026-31431), enables root privilege escalation across cloud ...

Over 1,800 developers were likely infected in the Mini Shai-Hulud supply chain attack that hit SAP, Lightning, and Intercom ...

Yet another npm supply-chain attack is worming its way through compromised packages, stealing secrets and sensitive data as ...

An exploit has been published for a local privilege escalation vulnerability dubbed "Copy Fail" that impacts Linux kernels ...

For generations of TV viewers, the beloved presenter has linked the patch of glass in our living rooms and the wide world ...