Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.

A widely used open-source tool stole passwords and API keys from over 1 million users. Here's what Ghanaian developers need ...

GlassWorm, a known malware, has put 73 harmful extensions into OpenVSX's registry. Hackers use it to steal developers' crypto ...

Malwarebytes recently uncovered a new malicious campaign targeting the Windows Update service. Focused on French-speaking users, the campaign uses layered obfuscation techniques to deliver multiple ...

The software bug was capable of crashing an operating system used by firewalls, servers and network appliances. It went undetected for over 27 years. Last month, it was caught by Mythos, the latest AI ...

The 2024 XZ incident illustrates how open-source software (OSS) has become strategic infrastructure in the global economy, opening up new strategic vulnerabilities and new pathways to geopolitical ...

Aethir said it halted a bridge exploit on its Ethereum-linked contracts, limiting losses to under $90,000 after PeckShield estimated $400,000 in damages. Aethir, a decentralized GPU cloud ...

The leak online of exploit code for an apparent Windows zero-day flaw dubbed "BlueHammer" could be the sign of a larger issue that security researchers face when collaborating with Microsoft on ...

Hackers linked to North Korea compromised the widely used Axios npm package by tricking a maintainer into installing malware disguised as a Microsoft Teams error fix, turning one of the most popular ...

To say Meta’s attempts to become a leader in AI have thus far fallen short would be like calling Mount Everest a short hike. But the company is pot-committed to the project, with plans to spend more ...

Meta will “eventually” offer open source versions of its new AI models Alexandr Wang is in charge of, but first, the company “wants to keep some pieces proprietary and to ensure they don’t add new ...