A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and ...

Microsoft's May 2026 VS Code update makes BYOK usable in restricted environments while adding agent, browser and issue-reporting updates.

Most software is assembled from thousands of borrowed components, and attackers have learned it is easier to poison a part ...

Compare top AI app builders for prototyping, mobile apps, internal tools, backend depth, security, pricing, and code ...

Cybercriminals used the Glassworm botnet to infect open source software projects with malware, and in turn hack the ...

Willem Delbare, Co-Founder and CEO of Aikido, is a serial SaaS entrepreneur and technical founder with a strong background in building developer-focused software companies. Before launching Aikido in ...

Researchers who found the bug warn that its Moderate rating understates a threat reaching across LLM gateways, MCP servers ...

Microsoft has had a VS Code extension for a long time, and it finally came back to bite them.

TeamPCP, the hackers behind the Shai-Hulud worm, has done significant damage to the open source ecosystem. But it's not ...

The company has made public the mathematics behind its post-quantum encryption verification, setting a challenge to the ...