The novel malware strain is being dubbed Shai-Hulud — after the name for the giant sandworms in Frank Herbert’s Dune novel ...

Aikido Security Ltd. today disclosed what is being described as the largest npm supply chain compromise to date, after ...

New Yorkers are on high alert after a warning about a hack that stole over $1 billion from American citizens, leading to a ...

Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...

JavaScript packages with billions of downloads were compromised by an unknown threat actor looking to steal cryptocurrency.

The malware was found in 18 npm packages that together are usually downloaded over 2 billion times per week. But the security community was quick to act.

The messaging board says an attacker 'exploited an out-of-date software package on one of 4chan’s servers, via a bogus PDF upload,' resulting in critical data being exposed. Nearly two weeks after a ...

Any service that requires a subscription for the user to enjoy the full benefits is seen as a leading target for cybercriminals looking for leverage to gain your trust and access your account. The ...

Microsoft has issued an alert about “active attacks” on server software used by government agencies and businesses to share documents within organizations, and recommended security updates that ...