A critical Ruflo vulnerability allowed unauthenticated attackers to achieve remote code execution (RCE) inside the MCP bridge ...

Dysphoria botnet, a new IoT threat that emerged six days after a major March 2026 law enforcement takedown, uses Ethereum and ...

OpenAI rogue AI agent breach now confirmed at a second company: Modal Labs CTO Akshat Bubna disclosed that the same agent ...

TRON launches mandatory mainnet upgrade with EVM enhancements, stronger security, and an August 16 node update deadline.

An active phishing campaign has been targeting hotel and other hospitality organizations across Europe and Asia since April 2026, using photo-themed ZIP files to drop a Node.js implant and dig into ...

Microsoft Threat Intelligence has identified an active multi-stage intrusion campaign targeting organizations in the hospitality and hotel industry since April 2026. We’ve observed this activity ...

The Cybersecurity and Infrastructure Security Agency (CISA) has released an alert to provide guidance in response to the software supply chain compromise of the Axios node package manager (npm). 1 ...

Threat actors have found a way to inject arbitrary JavaScript into the Flowise low-code platform for building custom LLM and agentic systems. The code injection was possible due to a design oversight, ...

The Google Workspace CLI (GWS CLI) offers businesses a streamlined way to automate and manage tasks across Google Workspace applications like Gmail, Drive, Calendar and Sheets. With features such as ...

Backend development is mainly defined by the library used to develop it. Choosing modern, optimized Node.js libraries directly impacts scalability, speed, and maintainability. Development time can be ...

Cybersecurity researchers have disclosed details of an active malware campaign called Stealit that has leveraged Node.js' Single Executable Application (SEA) feature as a way to distribute its ...