If you're a cybersecurity enthusiast or ethical hacker who wants to learn more about building hacking tools, this book is for ...

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

During a recent penetration test, we came across an AI-powered desktop application that acted as a bridge between Claude ...

At some point, I noticed I was repeating the same routine every week. None of the stuff I was doing was difficult, but it was a collection of small chores that kept interrupting real work. I'd have to ...

On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...

Langflow CVE-2026-33017 exploited in 20 hours after disclosure, enabling RCE via exec(), exposing systems before patching ...

The Information Security Forum (ISF) is an independent, not-for-profit association of leading global organisations who recognise the importance of protecting their business information. We provide ...

A former core infrastructure engineer has pleaded guilty to locking Windows admins out of 254 servers as part of a failed extortion plot targeting his employer, an industrial company headquartered in ...

With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...