Hackers use credentials stolen in the GlassWorm campaign to access GitHub accounts and inject malware into Python repositories.

Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible code, a technique that’s flummoxing traditional defenses designed to ...

OpenAI is acquiring Promptfoo to strengthen AI agent security, adding enterprise testing tools for jailbreaks, prompt injections, data leaks, and governance.

Your weekly cybersecurity roundup covering the latest threats, exploits, vulnerabilities, and security news you need to know.

Microsoft Defender Experts identified a coordinated developer-targeting campaign delivered through malicious repositories disguised as legitimate Next.js projects and technical assessment materials.

Cybersecurity stocks dropped for a second day as the threat of AI loomed large with Anthropic's latest AI tool that can scan code for vulnerabilities. Investors are worried new artificial intelligence ...

The Cybersecurity and Infrastructure Security Agency has navigated staffing cuts without a Senate-confirmed leader. Employees have become demoralized and concerned about the agency’s ability to ward ...

Hackers are actively exploiting the CVE-2026-1731 vulnerability in the BeyondTrust Remote Support product, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns. The security issue ...