Attackers published a malicious command-line version of the popular open-source password manager to the npm registry and may ...

Explore the top 10 new and promising API testing tools in 2025-2026 that are transforming the testing landscape.

IntroductionOn March 12, 2026, Zscaler ThreatLabz discovered a malicious ZIP archive containing military-themed document lures targeting Chinese-speaking individuals. Our analysis of this sample ...

A prompt injection attack hit Claude Code, Gemini CLI, and Copilot simultaneously. Here's what all three system cards reveal ...

ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian ...

The AI subscription buffet may still be open, but the plates are getting smaller, the premium dishes are moving behind higher ...

Sparfuchs Corporation today announced the public release of Sparfuchs-QA, an open-source software quality assurance platform ...

Self-propagating npm worm steals tokens via postinstall hooks, impacting six packages and expanding supply chain attacks.

Anthropic claims it has resolved the issues by reverting the reasoning effort change and the verbosity prompt, while fixing ...

Bitwarden CLI 2026.4.0 was compromised in a supply chain attack that targets crypto wallet keys, SSH keys, and CI/CD secrets.

Say “publish this as a website” and your AI agent handles the rest: it builds the file, uploads it, and hands you a ...

Vercel's security breach may expose API keys and secrets for crypto projects deploying on its platform. Here's what to do.