After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB of data.

Security researchers have discovered DarkSword, a sophisticated exploit chain targeting iOS 18.4 through 18.7.2. Unlike past spyware aimed at high-profile targets, DarkSword is being surreptitiously ...

Chainguard is expanding beyond open-source security to protect open-core software, AI agent skills, and GitHub Actions.

Since November, shadowy attackers have been using the 'DarkSword' iOS exploit to hack vulnerable iPhones on certain iOS 18 ...

Ransomware criminals exploited CVE-2026-20131, a maximum-severity bug in Cisco Secure Firewall Management Center software, as a zero-day vulnerability more than a month before Cisco patched the hole, ...

The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...

A federally-regulated prediction markets platform called criminal charges filed against the company in Arizona "seriously ...

For Hollywood’s biggest night, celebrities pay as much attention to their speeches as to their red-carpet attire. It’s a ...

One allows a remote attacker to execute arbitrary code inside a sandbox, the other could result in loss of sensitive information.

This critical Chrome browser vulnerability lets malicious extensions spy on your PC ...

Wondering if Linux has AI companions that are as accessible, capable, and easy to use as Microsoft Copilot? Try these AI ...