The popular JavaScript HTTP client Axios has been compromised in a supply chain attack, exposing projects to malware through malicious npm releases. Security researchers from StepSecurity identified ...

Josh Simons resigned after facing claims a think tank he used to run commissioned a report into journalists' backgrounds.

Here’s what we know, and what you need to know, about Coruna and DarkSword, two advanced iPhone hacking tools discovered by ...

Uh-oh. Now anyone can easily use it.

International conflicts in the physical world can lead to a spike in cyberattacks — both on government entities and on ...

A critical supply chain attack has compromised the popular JavaScript library axios, leading to developers unknowingly ...

Language package managers like pip, npm, and others pose a high risk during active supply chain attacks. However, OS updates ...

A government-grade iOS exploit kit called DarkSword has been leaked on GitHub, putting hundreds of millions of iPhones ...

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions ...

The leak provides competitors—from established giants to nimble rivals like Cursor—a literal blueprint for how to build a ...

Dutch professional football club Ajax Amsterdam (AFC Ajax) disclosed that a hacker exploited vulnerabilities in its IT ...