A new report out today from cybersecurity company Forcepoint LLC’s X-Labs research team details a supply chain attack that ...
Perplexity launches Bumblebee: How its new read-only dev scanner differs from Chainguard ...
Four supply-chain attacks hit OpenAI, Anthropic, and Meta in 50 days — none inside the model. A 7-row matrix maps what AI ...
A GitHub employee installed a routine VS Code extension update, handed cybercrime group TeamPCP enough access to exfiltrate ...
What happened OpenAI has urged macOS users to update their applications by June 12, 2026, after a supply chain attack compromised the signing certificates the company uses to authenticate its software ...
The Microsoft-owed software developer platform, GitHub, has confirmed a third-party has gained unauthorized access to 3800 ...
GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks that has impacted hundreds of organizations.
TeamPCP exfiltrated 3,800 internal GitHub repositories after poisoning a VS Code extension. No customer data was affected, the company says.
GitHub confirmed attackers stole 3,800 internal repositories via a poisoned VS Code extension. The same threat group, TeamPCP ...
Microsoft-owned web-based code hosting and collaboration platform GitHub has confirmed that it has been compromised, ...
GitHub has contained a breach involving unauthorized access to thousands of internal repositories, allegedly linked to a ...
GitHub is investigating an alleged breach after TeamPCP claimed access to nearly 4,000 private repositories, though no impact ...