A cyber attack hit LiteLLM, an open-source library used in many AI systems, carrying malicious code that stole credentials ...

New AI-powered scanner -- who-touched-my-packages -- detects zero-day malicious packages and credential exfiltration in seconds BOSTON, March 26, 2026 /PRNewswire/ -- Point Wild, a leading global ...

Apple is adding 100+ new App Store Connect metrics, giving developers deeper, first-party insights into monetization, ...

Langraph Deploy CLI lets developers create, test, and deploy AI agents from the terminal, with templates and langraph deploy ...

After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB ...

The compromised packages, linked to the Trivy breach, executed a three‑stage payload targeting AWS, GCP, Azure, Kubernetes ...

A malicious Python package masquerading as a legitimate Telegram development tool has been identified as a vehicle for remote code execution attacks, raising concerns about supply chain security ...

Oracle uses JavaOne 2026 to launch JDK 26 and argue that Java can stay relevant in the AI era by building on its traditional strengths in performance, language evolution, and enterprise stability.

The Contagious Interview campaign weaponizes job recruitment to target developers. Threat actors pose as recruiters from crypto and AI companies and deliver backdoors such as OtterCookie and ...

Postman, a leading API platform, is evolving its platform, introducing AI-native, git-based API workflows and an API Catalog—a central system of record that provides a single view of APIs and services ...

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources. The panelists discuss the dramatic escalation ...