The type confusion bug can lead to V8 sandbox escape and control-flow hijacking of the host process. A critical-severity type ...

Cl0p claims over 40 organizations fell victim to attacks exploiting a PTC Windchill and FlexPLM vulnerability.

Isolated-vm's ExternalCopy type confusion lets sandboxed code corrupt host memory and potentially reach host RCE; fixes are ...

OpenAI’s documents list pricing for GPT-5.6-Cyber at $12.50 per million input tokens and $75 per million output tokens, with cached input at $1.25 per million tokens.

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

North Korean hackers quietly poisoned trusted software packages ...

Amazon Threat Intelligence has tied a DPRK hacking group to four separate npm package supply chain attacks, including axios. The company’s security teams have connected the axios, debug, chalk, and ...

Open source software helps developers build applications faster, but every dependency can introduce security risks. In this episode of DEMO, Keith Shaw talks with Bria Giordano, Director of Product ...

New findings connect the same Pyongyang-backed group to four compromises dating to 2025, revealing a larger operation than previously known. A North Korea-linked hacker group has been tied to four ...

A North Korea-linked hacker group has been tied to four open-source software compromises dating back to March 2025, Amazon researchers said Wednesday, significantly expanding the publicly known scope ...

When FBI Deputy Assistant Director Todd Hemmen told a Washington audience Tuesday that Anthropic's Mythos AI presents "future challenges for law enforcement," he was giving the first explicit public ...