GitHub hack exposed 3,800 internal repos through a poisoned VS Code extension, raising new concerns over developer supply ...

Millions of AI agents and tools around the world have been imperiled by a critical vulnerability that can allow hackers to ...

Microsoft has had a VS Code extension for a long time, and it finally came back to bite them.

A GitHub employee installed a routine VS Code extension update, handed cybercrime group TeamPCP enough access to exfiltrate ...

Palabra.ai, the real-time AI voice translator backed by Seven Seven Six, has crossed $1 million in annual run rate, growing ...

Microsoft uncovered 150+ AI-assisted cryptojacking domains using fake software downloads to deploy persistent malware.

For more than a year, a self-propagating worm rode VS Code extensions, npm packages, and stolen developer credentials through ...

North Korea-linked hackers have upgraded the InvisibleFerret malware to bypass script-based security tools, converting its Python code into compiled modules that are harder for defenders to inspect ...

Zaya1-8B is a huge shift in LLMs, and the results are impressive.

Stolen credentials produced valid Sigstore certificates, clearing 633 malicious npm packages — one of seven developer tool ...

A few years ago, a massive affiliate code hijacking scheme rocked the internet. YouTubers and other influencers discovered ...

Over a six-week stretch in spring 2026, OpenAI rebuilt what its Codex product actually is. On April 16, the company released a major Codex update titled “Codex for (almost) everything,” ...