The Bitwarden CLI NPM package compromise is tied to a Checkmarx supply chain attack and references the Shai-Hulud worm.

A reported target hack involving stolen source code has drawn attention after cybercriminals claimed that they have stolen data linked to the US retailer. The incident surfaced when a previously ...

Monday cybersecurity recap on evolving threats, trusted tool abuse, stealthy in-memory attacks, and shifting access patterns.

The 21-year-old is the Country Lead for Girls in Robotics Kenya Chapter and co-founder of Space Shift, mentorship roles she ...

Malicious KICS Docker tags and VS Code versions 1.17.0, 1.19.0 enabled data exfiltration, risking exposed infrastructure ...

Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a cross-platform RAT. Axios sits in 80% of cloud environments. Huntress confirmed ...

Cloud development platform Vercel has disclosed a security incident after threat actors claimed to have breached its systems ...

Paul Smith, Anthropic's chief commercial officer, has disclosed the precise cause of the accidental leak of Claude Code's source code. This comes after Anthropic confirmed that “human error” caused ...

Anthropic, the American artificial intelligence company behind the Claude family of AI models, has once again inadvertently exposed the complete source code of its AI coding tool, Claude Code, through ...

OpenAI is one of many organizations affected by the recent Axios supply chain attack attributed to North Korean hackers.