A threat actor has used 36 malicious NPM packages posing as Strapi plugins to distribute malware targeting Redis, Docker, and ...
The North Korean threat actor behind the Axios supply chain attack has been targeting high-profile Node.js maintainers.
As enterprises rely more heavily on AI technologies and services, attackers’ living-off-the-land techniques have evolved to ...
Two CISOs dissect the Axios npm attack, revealing a self-erasing RAT, CI/CD compromise risks and why open-source software ...
OpenClaw, an open-source AI agent with a red lobster logo, has sparked a nationwide craze in China in early 2026. Unlike ...
M stolen after six-month DPRK social engineering campaign began fall 2025, exposing Drift’s contributors and cloud assets.
As the United Arab Emirates (UAE) and other Gulf states were targeted by Iranian airstrikes, Hongkonger Oi Chau joined a ...