A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and ...

TrapDoor spread 34 malicious packages across npm, PyPI, and Crates.io, stealing developer credentials and enabling persistence.

OpenAI confirms a severe 2026 supply chain attack compromised internal repositories. Discover how this TanStack security ...

WordPress 7.0 “Armstrong,” released May 20, 2026, arrived without the real-time collaborative editing feature that had been ...

Sometime around the last week of May 2026, attackers uploaded poisoned packages to three of the most widely used software ...

On April 29, 2026, someone slipped malicious code into four widely used SAP software packages. Within days, the infection had spread to at least 169 packages across the npm registry, the world’s ...

The only platform that makes your entire organization quantum-proof – biometrics, AI, fraud, encryption – with one API key. No cryptography team required. The organizations investing millions and ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...