IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals ...

Qix is an open source maintainer account that was compromised by a phishing attack. This allowed attackers to infect 18 popular npm packages with malicious code. Together, these packages are ...

The dialogue AI was trained from a character sheet created by scraping the fan wiki. A "tiny shared memory" was added between ...

Crims have added backdoors to at least 18 npm packages after developer Josh Junon inadvertently authorized a reset of the two ...

The study offers a blueprint for effective defense. The researchers developed a multi-layered guardrail system that ...

Discover how Excel’s Copilot uses AI to automate tasks like summarization and data cleanup. Is it the productivity breakthrough you need?

According to ReversingLabs' 2025 Software Supply Chain Security Report, 14 of the 23 crypto-related malicious campaigns in ...