Days after IBM and Red Hat announced a master security plan for open-source software, Red Hat suffers a major breach of its ...

GitHub says the hackers who breached 3,800 internal repositories gained access via a malicious version of the Nx Console VS Code extension, compromised in last week's TanStack npm supply-chain attack.

A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and ...

TL;DR  Introduction  At the start of this year, I wrote a blog on how 2025 was the ‘year of the infostealer’, and it doesn’t ...

GitHub shipped the developer security industry's most-requested registry control on May 22, 2026: staged publishing, now generally available for all npm packages. The feature inserts a mandatory ...

GitHub says hackers stole about 3,800 internal repos after a poisoned VS Code extension hit an employee device ...

It has been revealed that multiple packages under the official Red Hat npm channel '@redhat-cloud-services' were compromised, and a worm-type malware that steals developer credentials was being ...

With the launch of a Windows desktop application, OpenAI has officially expanded its ecosystem for its flagship AI software ...

Your weekly cybersecurity recap: a GitHub supply chain worm, an exploited Android flaw, Instagram account takeovers, and a ...

Developers build muscle memory around opening a terminal as soon as they open a project in a code editor like VS Code to run the project locally. For a long time, it was my routine as well. I would ...

Its disclosure raises questions about what security researchers should expect from vendors, and how far in advance of its publication they should notify vendors about a bug. A vulnerability in ...