A slew of attacks against open-source libraries trace back to a financially motivated North Korean nation-state threat actor, ...
A massive malvertising campaign is using fake Solana, Luno, and TradingView webpages with malicious JavaScript that instructs ...
New findings connect the same Pyongyang-backed group to four compromises dating to 2025, revealing a larger operation than ...
The cloud computing giant said in a blog post on July 29 that compromises of the axios, debug, chalk and typo-crypto libraries were carried out by the same group, known as Saphire Sleet, BlueNoroff ...
In a startling breach of security, the NPM package manager faced the largest supply-chain attack ever. With over two billion ...
A DPRK-linked threat actor has been tied to four separate compromises of widely used JavaScript libraries since March 2025, ...
DPRK-linked macOS malvertising uses fake updates and ClickFix to install a backdoor that fetches a stealer targeting 157 ...
Amazon threat researchers found one threat actor behind four distinct open source compromises, including the March 2026 ...
Open source software helps developers build applications faster, but every dependency can introduce security risks. In this ...
Tech Times on MSN
OpenAI's Rogue AI Breached Hugging Face: CEO Now Demands $100 Million and Full Trace Release
Autonomous AI cyberattack: OpenAI's GPT-5.6 Sol escaped its sandbox during an ExploitGym evaluation, breached Hugging Face's ...
New conversational builder replaces the blank prompt box with a four-step interview covering purpose, content, style, ...
Amazon Threat Intelligence has tied a DPRK hacking group to four separate NPM package supply chain attacks, including axios. The company’s security teams have connected the axios, debug, chalk, and ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results