A popular JavaScript cryptography library is vulnerable in a way which could allow threat actors to break into user accounts.

Dr. James McCaffrey presents a complete end-to-end demonstration of anomaly detection using k-means data clustering, ...

Sha1-Hulud malware is an aggressive npm supply-chain attack compromising CI/CD and developer environments. This blog addresses frequently asked questions and advises cloud security teams to ...

The latest version also executes malicious code during the preinstall phase, and is bigger and faster than the first wave, ...

While the September 2025 Shai-Hulud attack focused primarily on credential harvesting and self-propagation, this new variant ...

Early customers have reported up to 80% reduction in execution time, allowing teams to redeploy developer hours toward ...

The originators of the Contagious Interview cyberattack campaign are stitching GitHub, Vercel, and NPM together into a ...

This week, a recently fixed Oracle flaw is being actively exploited, Shelly tackled Pro 4PM DoS bug, "Shai-Hulud 2.0" hit npm ...

The attackers have learned from their mistakes and have now developed a more aggressive version of the worm. It has already ...

Oyrinterest was particularly piqued by the agentic elements being added to the mix. Here, AWS noted that Transform is the first agentic AI service to accelerate the transformation of Windows, ...