Developers of major Linux distributions have begun shipping patches to address a local privilege escalation (LPE) ...

Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.

Zed is a completely new software coding text editor written entirely in the memory-safe Rust programming language.

An OpenSSH vulnerability introduced 15 years ago could allow attackers to obtain full root shell access to vulnerable servers ...

A new report from ReversingLabs identified a new tactic by North Korean hackers: feeding malicious code to the AI systems ...

Attackers continue to scale a campaign to seed Open VSX with seemingly benign VS Code extensions that spread self-propagating ...

Threat hunters are warning that the cybercriminal operation known as VECT 2.0 acts more like a wiper than a ransomware due to ...

The fastest AI code editor, according to its creators, has reached version 1.0. The open-source tool processes data like a ...

The popular Python package for monitoring data quality was briefly available as a malicious version. Provider Elementary ...

Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal ...

A new wave of the Glassworm campaign is targeting the OpenVSX ecosystem with 73 "sleeper" extensions that turn malicious ...

Software security testing outfit Checkmarx has become the latest organization caught up in an ongoing attack on security-tool ...