The hackers compromised GitHub Action tags, then shifted to NPM, Docker Hub, VS Code, and PyPI, and teamed with Lapsus$.

A newly leaked iPhone hacking tool could let attackers easily target devices that haven’t been updated to the latest iOS ...

Two more GitHub Actions workflows have become the latest to be compromised by credential-stealing malware by a threat actor ...

Hundreds of millions of users and an estimated 2.5 billion devices are reportedly exposed to potential attacks.

Once a victim is exposed to a malicious link, the exploit gains filesystem access and exfiltrates data to an ...

Leaked "DarkSword" exploits published to GitHub allow hackers and cybercriminals to target iPhone users running old versions ...

The open-source supply chain hack represents “meaningful industry-wide risk”, according to an industry expert.

This week, the AppsFlyer SDK breach, JPMorgan sued over ties to a Ponzi scheme, the OFAC sanctioned a network tied to North ...

A sophisticated iPhone hacking technique and surveillance campaign ran rampant internationally for months, prior to a patch ...

GlassWorm campaign injects malware into GitHub Python repos using stolen tokens since March 8, 2026, exposing developers to ...

Hackers use credentials stolen in the GlassWorm campaign to access GitHub accounts and inject malware into Python ...

Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible ...