…and over 180 million developers who contribute to more than 420 million code repositories. The Validation Gap: Automated Pentesting Answers One Question. You Need Six. Automated pentesting tools deliver real value, but…
…In late April, Tycoon2FA was observed in a campaign that leveraged the OAuth 2.0 device authorization grant flows to compromise Microsoft 365 accounts, indicating that the operator continues to develop the…
…In the ongoing Shai-Hulud malware campaign attributed to TeamPCP hackers, dozens of TanStack packages infected with credential-stealing code were published on the npm index, compromising developer environments, including Grafana's…
…The cybercrime group later developed its own ransomware strain using leaked Conti 2 builder code . However, according to Coveware security researchers, "a coding mistake in the ESXi malware causes it to encrypt…
…Most recently, multiple official SAP npm packages were compromised in a supply-chain attack aimed at stealing credentials and authentication tokens from developers' systems. As the world's largest vendor of enterprise…
…Mistral AI told BleepingComputer that the TeamPCP managed to contaminate some of the company’s software development kit (SDK) packages. In an advisory published earlier this week, the company said that the…
…In the later stages of the attack, Storm-2949 deployed the ScreenConnect remote access tool on compromised systems, attempted to disable Microsoft Defender protections, and wipe forensic evidence. It should be noted…
Laravel Lang packages hijacked to deploy credential-stealing malware By Lawrence Abrams May 23, 2026 04:48 PM A supply chain attack targeting the Laravel Lang localization packages has exposed developers to…
…If the host is not Russian, Reaper retrieves and executes the malicious AppleScript with the data theft routine using the osascript command-line tool built into macOS. Upon launch, it prompts the…
…Hackers used AI to develop zero-day exploit for web admin tool Actively Exploited Authentication Bypass Catalyst SD-WAN Cisco CVE-2026-20182 Peering Zero-Day Lawrence Abrams Lawrence Abrams is the…