When a new asset goes live, attackers start scanning within minutes. Sprocket Security shows how automated attacks move from ...

SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.

GitHub facades and Ethereum smart contracts power a March 2026 admin-targeted campaign, enabling resilient C2 rotation and ...

A court commissioner found enough evidence to continue a case against the attorney accused of leading a break-in at a beagle ...

More than two-thirds of children under the age of two use screens - some watching devices for up to eight hours a day, ...

Several npm packages for SAP's cloud application development ecosystem have been compromised as TeamPCP's supply chain ...

A threat group planted a malicious npm package in a crypto trading project through an AI-generated commit by Anthropic's ...

The Bitwarden CLI NPM package compromise is tied to a Checkmarx supply chain attack and references the Shai-Hulud worm.

Multiple SAP npm packages were compromised in a supply chain attack designed to steal developer credentials and tokens.

Researchers say the campaign targeted developer credentials and cloud secrets while abusing trusted publishing and AI coding ...

A new wave of the Glassworm campaign is targeting the OpenVSX ecosystem with 73 "sleeper" extensions that turn malicious ...

The least exciting page in your browser is also the easiest one to vibe-code.