GlassWorm malware uses a Zig-based dropper to infect developer tools, stealing data and spreading across IDEs.

Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...

An attacker purchased 30+ WordPress plugins on Flippa, planted backdoors that lay dormant for eight months, then activated ...

'This is unironically a malware nuclear missile.' ...

Google patches 21 Chrome vulnerabilities, including an actively exploited zero-day flaw that could enable code execution and ...

Adobe patches a critical PDF flaw exploited for months, allowing attackers to bypass sandbox protections and deliver malware.

Or, why the software supply chain should be treated as critical infrastructure with guardrails built in at every layer.

Version 1.0 of Net.Attack(): Code Or Die! is available now on Steam. Get another look at gameplay and more from Net.Attack(): Code Or Die! in this launch trailer for the action roguelike game. In ...

A credit card skimmer campaign discovered in early 2025 and still actively tracked as of April 2026 has compromised an ...

A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software packages, to distribute a cross-platform, ...

Adobe patches CVE-2026-34621 after active exploitation since Dec 2025, preventing remote code execution via malicious PDFs.

The latest monthly Patch Tuesday update from Microsoft landed earlier on 14 April, including two notable zero-day flaws amid ...