GitHub disclosed that attackers used a malicious Visual Studio Code extension on an employee's laptop to exfiltrate roughly 3 ...

A cybersecurity company trusted to protect some of the largest networks in the country has itself been breached. Trellix, the ...

Mini Shai-Hulud npm campaign compromises @antv packages, targeting blockchain developers' GitHub tokens, AWS keys, and CI/CD ...

Point Predictive, the leading provider of AI-powered fraud and risk solutions for auto lending, today announced that Stellantis MarketCenter will offer BorrowerCheck™ for Dealers with Driver’s License ...

TanStack has released a detailed postmortem describing a sophisticated supply-chain attack that compromised 42 npm packages ...

In early March 2026, Andrej Karpathy — co-founder of OpenAI and former Director of AI at Tesla — released a three-file GitHub ...

A GitGuardian researcher named Guillaume Valadon was sifting through public GitHub commits when he hit a repository whose name read like a mistake: Private-CISA. It belonged to a contractor for the ...

It seems every organization is exposing secrets on the Internet these days — even the US government. GitGuardian researcher Guillaume Valadon today revealed he discovered a public GitHub repository ...

Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public ...

With Google I/O 2026 opening Tuesday and agentic coding confirmed as a central theme, software engineers are auditing how they configure their AI coding tools. One repository has emerged as the ...

A protein doctors routinely use to measure how aggressively tumors are growing may also help prevent the chromosome errors ...

A poisoned open-source dependency let attackers breach two OpenAI employee devices and steal credentials from a limited set of its internal source code repositories, OpenAI confirmed in a May 14, 2026 ...