Publicly released exploit code for an effectively unpatched vulnerability that gives root access to virtually all releases of ...

Over 1,800 developers were affected by the Mini Shai-Hulud supply chain attack that hit the PyPi, NPM, and PHP ecosystems ...

The flaw allows an unprivileged local user to write four controlled bytes into the page cache of any readable file on a Linux ...

Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and ...

SMS blasters, npm supply chain hits, and unpatched Windows flaws. Stay ahead of new phishing kits and exposed servers.

Socket’s acquisition of Secure Annex extends software supply-chain security beyond open-source dependencies into browser and ...

This week, election threats resurfaced. A prolific hacker arrested. Black Axe network disrupted. China-linked disinformation ...