Researchers outline how the PhantomRaven campaign exploits hole in npm to enable software supply chain attacks.

GlassWorm spread via 14 VS Code extensions; Solana + Google Calendar C2; stole credentials, drained 49 wallets.

Supply-chain attacks have evolved considerably in the las two years going from dependency confusion or stolen SSL among ...

The Open VSX registry rotated access tokens after they were accidentally leaked by developers in public repositories and allowed threat actors to publish malicious extensions in an attempted ...

Cybercrime crackdowns, AI security flaws, and major breaches — from $176M fines to Starlink, F1, and Google’s new threat ...