Threat actors are abusing Microsoft Teams voice calls by impersonating corporate IT support staff to trick employees into ...

The insurgent Democratic candidate in Maine's Senate race dropped out within days of an ex-girlfriend publicly accusing him ...

According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD ...

Unit 42 says attackers are posing as helpdesk staff and persuading employees to hand over remote control before dropping ...

North Korean threat actors are escalating the PolinRider supply chain attack across Go, Packagist, and npm package ...

By turning the terminal into a live, collaborative canvas, Anthropic is proving that the most valuable output of an AI coding ...

Hackers are exploiting a recently disclosed critical vulnerability (CVE-2026-48558) in SimpleHelp to deploy Djinn Stealer, a previously undocumented cross-platform information stealer targeting ...

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

The infostealer was delivered via CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp.

Kage can package entire websites into single files ...

Nexus gives teams one governed control point to route, observe, audit, and manage OpenAI, Anthropic, and anyone’s ...

A wave of recent product updates suggests the competition among AI coding tools is moving beyond autocomplete and chat toward long-running agents that can understand projects, invoke tools, and carry ...