Four SAP NPM packages compromised in the Mini Shai-Hulud supply chain attack trigger a Bun runtime to install an information ...
Crypto hacks in April topped $630 million across 25 incidents led by DeFi exploits, marking the highest monthly total since ...
The exploit used a similar playbook as Drift's $285 million breach earlier this month — a compromised deployer key with no ...
A threat group planted a malicious npm package in a crypto trading project through an AI-generated commit by Anthropic's ...
Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and ...
AWS grabs OpenAI, Google courts the Pentagon, and Microsoft races to plug a zero-click hole. Cloud, code, and combat are suddenly one tangled leaderboard. Ready up, because this bracket's reshuffling ...
Socket’s acquisition of Secure Annex extends software supply-chain security beyond open-source dependencies into browser and ...
Six teams exploited Claude Code, Copilot, Codex, and Vertex AI in nine months. Every attack hit runtime credentials that IAM ...