GlassWorm malware uses a Zig-based dropper to infect developer tools, stealing data and spreading across IDEs.

The NPM package for Axios, a popular JavaScript HTTP client library, was briefly compromised this week, possibly by North ...

Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...

Axios, a widely used JavaScript HTTP client, was briefly distributed through npm in two malicious versions after a maintainer ...

Adobe Acrobat and Reader users are under attack from hackers using a zero-day vulnerability. Update within 72 hours, Adobe ...

Up to four npm packages on Axios were replaced with malicious versions, in one of the most sophisticated supply chain attacks ...

Google patches 21 Chrome vulnerabilities, including an actively exploited zero-day flaw that could enable code execution and ...

Hackers linked to North Korea are suspected of an ambitious attack on an inconspicuous but widely used software package, ...

Google links Axios npm supply chain attack to UNC1069 after trojanized versions 1.14.1 and 0.30.4 spread WAVESHAPER.V2, ...

Threat actors can use malicious web content to set up AI Agent Traps and manipulate, deceive, and exploit visiting autonomous ...

An unknown malware slinger targeting open source software developers via Slack impersonated a real Linux Foundation official ...

In 2025, Google fixed a total of eight zero-days exploited in the wild, many of which were discovered and reported by ...