A new Mini Shai-Hulud wave hit keyv and 800+ npm packages. The malware now scans 469 secret locations, including AI agents, ...

At TriMas, sustainability is an important part of how we operate, innovate and create long-term value," said Thomas Snyder, TriMas President and Chief Executive Officer. "We continue to strengthen our ...

Open-source malware has changed shape. What once focused on noisy cryptomining has moved toward something far more valuable: access.

Microsoft 365 phishing campaign disclosed by Arctic Wolf Labs abuses Google Meet and Amazon S3 to bypass enterprise email ...

Apple is limiting bug bounty program submissions due to AI slop, North Carolina ports face cyberattacks, and Wall Street hedge funds hacked.

Compromising the open-source supply chain is easy to do and spreads more quickly than traditional supply-chain attacks, ...

Malicious npm packages impersonate Alibaba tools to deliver a cross-platform RAT with command execution, persistence, and ...

An unknown Chinese threat actor runs leaked DarkSword across 100-plus web properties, using fake AWS and Apple logins to ...

New findings connect the same Pyongyang-backed group to four compromises dating to 2025, revealing a larger operation than ...

At Black Hat USA 2026, Zenity Labs today released new research demonstrating zero-click PleaseFix exploit chains across Claude in Chrome, Gemini in Chrome, Perplexity Comet, ChatGPT Atlas and Copilot ...