A hacker inserted malware in Axios, an open-source web tool downloaded tens of millions of times weekly, in a widespread hack ...

Critical digital infrastructure is increasingly maintained by under‑resourced individuals, yet exploits have economic and ...

The popular JavaScript HTTP client Axios has been compromised in a supply chain attack, exposing projects to malware through malicious npm releases. Security researchers from StepSecurity identified ...

The full breadth of this incident is still unclear, but given the popularity of the compromised package, we expect it will ...

Leaked "DarkSword" exploits published to GitHub allow hackers and cybercriminals to target iPhone users running old versions ...

Once a victim is exposed to a malicious link, the exploit gains filesystem access and exfiltrates data to an ...

Beware! Shadowy attackers have been using an iOS exploit to hack vulnerable devices.

Josh Simons resigned after facing claims a think tank he used to run commissioned a report into journalists' backgrounds.

This week, the AppsFlyer SDK breach, JPMorgan sued over ties to a Ponzi scheme, the OFAC sanctioned a network tied to North ...

Uh-oh. Now anyone can easily use it.

A threat actor who stole credentials from a legitimate node package manager (npm) publisher has spread a persistent, ...