Microsoft is taking advantage of its intellectual property rights with OpenAI, encouraging employees to use the company's top ...
BSides Las Vegas 2026 spent three days making the case that AI coding tools are supply chain attack targets. ChainDrop, a ...
keyv npm supply chain attack on August 4, 2026 let the Shai-Hulud worm compromise 400-plus packages and more than two billion ...
More than 400 NPM packages have been infected with the Mini Shai-Hulud worm in the ChainDrop supply chain attack.
A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...
Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.
A hijacked GitHub account let the Shai-Hulud worm pass npm's trust check, spreading through packages with 2 billion monthly ...
A trojanized QuickFox Windows installer delivered FDMTP in a supply chain attack active since at least August 2025, after ...
The UK's AI Safety Institute said recent behaviour from Anthropic and OpenAI models was malicious and unprecedented.
Malware infected at least 444 npm packages spanning 2,000 versions, threatening software with over two billion monthly installs. Attackers compromised maintainer Jared Wray's account, then used stolen ...
Latest update to Microsoft’s code editor improves dictation, introduces side chats, and adds support for comments to provide ...
Counterfeit extensions impersonating real developer tools have been found on the Open VSX registry, with roughly a quarter of ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results