GlassWorm malware uses a Zig-based dropper to infect developer tools, stealing data and spreading across IDEs.

Sonatype®, the leader in AI-driven DevSecOps, today unveiled the Q1 2026 Open Source Malware Index, identifying 21,764 malicious open source packages in the first quarter of the year and bringing the ...

A Grafana AI flaw enables zero-click data exfiltration by hiding malicious prompts in URLs, said a Noma Security report.

As the way software is built fundamentally changes, Cloudflare introduces the infrastructure to power millions of autonomous, ...

Financial and tech sectors and national governments brace for security threat posed by latest iteration of Mythos ...

Axios, a widely used JavaScript library, is affected by a new critical vulnerability that enables attackers to chain exploits ...

OpenAI has told users of its Mac software to update their applications after a third-party supply-chain incident touched the company’s app-signing workflow, prompting a wider effort to replace ...

An attacker has been using maliciously crafted PDF files to exploit a zero-day in Adobe Acrobat and Reader for at least four ...

It's not clear how many people were compromised by this hacking campaign, but a security researcher said the hackers were ...

Two Composer flaws (CVE-2026-40176, CVE-2026-40261) allow command execution via Perforce configurations, prompting urgent ...

One – the familiar, business-as-usual undertakings of being one of North America’s top waste-management companies – was ...

Plus, the actor opens up about working with his daughter on 'Soapbox.' ...