Days after IBM and Red Hat announced a master security plan for open-source software, Red Hat suffers a major breach of its ...
Perplexity launches Bumblebee: How its new read-only dev scanner differs from Chainguard ...
Official Red Hat NPM accounts have been compromised and used to push a malicious worm that spreads from machine to machine, ...
Codex tokens were exfiltrated via a popular npm package, affecting users since v0.1.82 and enabling persistent account access ...
A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and ...
Red Hat's official npm namespace has been hijacked to push backdoored package versions built to steal cloud and developer ...
Malicious Sicoob.Sdk stole PFX certificates and client IDs via NuGet downloads, enabling API impersonation and payment abuse risks.
The fatal flaw was a hardcoded fallback token left in the code. Because the malware carried the operator's own GitHub credential, researchers could trace the exfiltration directly, observing around ...
The tool gathered over 29,000 downloads before the malicious npm package was identified ...
Ubiquiti released a new security bulletin detailing fixes for six security issues, including one rated 9.1 (critical) and one scoring a perfect 10.0 on the CVE risk scale. The vulnerabilities ...
An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q4 2025 and Q1 2026 ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results