Threat actors earlier today published more than 600 malicious packages to the Node Package Manager (npm) index as part of a ...
Anthropic raised $65 billion in new fund-raising that put its value at $900 billion, ahead of OpenAI’s last valuation of $730 ...
On May 11, 2026, a self-replicating worm called Mini Shai-Hulud quietly slipped into 42 widely used TanStack open-source ...
Hundreds of packages across npm and PyPI have been compromised in a new Shai-Hulud supply-chain campaign delivering credential-stealing malware targeting developers. The attacker hijacked valid OpenID ...
A new report out today from cybersecurity company Forcepoint LLC’s X-Labs research team details a supply chain attack that ...
Attackers Widen Package Deception Beyond Typosquatting Arabian Post. clearfix> Cybercriminals are shifting from crude misspellings of trusted software packages to more convincing names that appear to ...
The delays, which companies say have worsened significantly in recent weeks, are the latest step in the Trump administration’s efforts to block wind power. By Brad Plumer Reporting from Washington The ...
On May 19, the Mini Shai-Hulud worm compromised one npm maintainer account and pushed 639 malicious versions across 323 ...
Security researchers at Sysdig recorded the first exploitation attempt against CVE-2026-44338 — a missing-authentication flaw ...
Google’s Project Zero demonstrates a new zero-click exploit for the Pixel 10 phones, showing a full escalation from remote to kernel without user interaction. During the investigation Project Zero ...
Google says attackers are using AI for zero-day research, malware development, reconnaissance, and access to premium AI tools.
This dynamic, interactive map tracks new U.S. nuclear projects and demonstration projects across the development life cycle. Nuclear energy is gaining momentum in the United States with significant ...