AI models are finding thousands of zero-day flaws in minutes, forcing defenders to adopt automated, real-time virtual ...

North Korean hackers quietly poisoned trusted software packages ...

This week’s cybersecurity recap covers rogue AI models, an $88M Bitcoin theft, OWA exploits, water-system attacks, Teams ...

A self-propagating malware campaign has compromised more than 430 npm packages, exposing software projects linked to dependencies that collectively record about two billion installations each month.

The attackers behind the Atomic Arch supply chain campaign have adapted. After Arch Linux developers purged more than 1,900 compromised packages and declared the community repository clean in mid-June ...

Amazon Threat Intelligence has tied a DPRK hacking group to four separate npm package supply chain attacks, including axios. The company’s security teams have connected the axios, debug, chalk, and ...

Open source software helps developers build applications faster, but every dependency can introduce security risks. In this ...

No Human Directed a Single Step. Roughly 17,000 Autonomous Actions Over One Weekend. One Named Zero-Day. Six of Seven ...

New findings connect the same Pyongyang-backed group to four compromises dating to 2025, revealing a larger operation than ...

Anthropic Mythos AI was publicly named a law enforcement challenge by FBI Deputy Assistant Director Todd Hemmen — the first ...

A slew of attacks against open-source libraries trace back to a financially motivated North Korean nation-state threat actor, finds analysis from Amazon Web Services set for publication Wednesday ...

Catch up on rogue AI agents, exploited Check Point and Zimbra flaws, espionage campaigns, ClickFix lures, slopsquatting risks ...