Spread the loveIn a chilling reminder of the vulnerabilities inherent in open source software, two significant supply chain attacks occurred in March 2026, targeting widely used tools that affect a ...
A critical Adobe Acrobat zero-day has been exploited for months via malicious PDFs to steal data and potentially take over ...
Claude Mythos autonomously found zero-days in OpenBSD, FFmpeg, FreeBSD and major browsers that survived decades of expert ...
Hackers linked to North Korea compromised the widely used Axios npm package by tricking a maintainer into installing malware ...
CVE-2025-59528 exploited in Flowise for over six months across 12,000+ exposed instances, enabling full system compromise.
North Korean hackers pushed out malicious updates to a popular open source project by hacking a top developer's computer in a ...
Phishing surge, LinkedIn tracking claims, spyware use, and rising stealers expose growing abuse of trusted systems.
Two CISOs dissect the Axios npm attack, revealing a self-erasing RAT, CI/CD compromise risks and why open-source software ...