Amazon links the 2025 debug and chalk npm hijack to Sapphire Sleet with medium confidence, but does not show which evidence ...

AWS Links Npm Attacks To North Korean Hackers Arabian Post. clearfix>Amazon Web Services has attributed a series of compromises involving widely used npm software packages, including Axios, Debug and ...

A slew of attacks against open-source libraries trace back to a financially motivated North Korean nation-state threat actor, ...

Researchers say an unauthenticated vulnerability enables code execution, credential theft, AI memory poisoning, and ...

New findings connect the same Pyongyang-backed group to four compromises dating to 2025, revealing a larger operation than ...

If users are stuck waiting, they don't care which service is slow. Frontend observability helps you see — and fix — what they experience.

A DPRK-linked threat actor has been tied to four separate compromises of widely used JavaScript libraries since March 2025, ...

Amazon threat researchers found one threat actor behind four distinct open source compromises, including the March 2026 ...

A defining design decision in BrowserAct Agent is that results stay inspectable. Extracted records keep their source page ...

Cisco Talos has detailed msaRAT, a Rust-based RAT used by the Chaos ransomware crew that drives a headless Chrome or Edge ...

The cloud computing giant said in a blog post on July 29 that compromises of the axios, debug, chalk and typo-crypto libraries were carried out by the same group, known as Saphire Sleet, BlueNoroff ...

Kimi K2.7 Code delivers a 21.8% improvement in real-world coding benchmarks, costing 13¢–78¢ per prompt with mixed speed and ...