SVG phishing email attacks are bypassing enterprise email security gateways by hiding JavaScript inside image files and ...

With npm v12, GitHub closes a central attack vector: installation scripts from dependencies will only run after explicit ...

Miasma compromised 32 Red Hat packages June 1 via a hijacked CI/CD pipeline producing valid SLSA attestations, then hit 57 more June 3 using Phantom Gyp to evade install monitors. Red Hat confirmed no ...

Socket raises $60M to expand AI-driven software supply chain security and protect developers from cyber threats worldwide.

U.S. Representative Rick Larsen (WA-02) on Monday announced the launch of the 2026 Congressional App Challenge (CAC).

North Korea-linked hackers have upgraded the InvisibleFerret malware to bypass script-based security tools, converting its Python code into compiled modules that are harder for defenders to inspect ...

Police seeking access to messages and photos on a cellphone belonging to Gondek as part of corruption probe, court documents ...

Cybersecurity roundup: supply chain threats, AI agent risks, browser-cloning malware, mule networks, endpoint bypasses, and ...

The Company confirms that a new block admission application (the "New Block Admission Application") has been made to the London Stock Exchange ("LSE") for 1,000,000 A ordinary shares of £0.125 each in ...

The Company announces that an application has been made to the London Stock Exchange for a block listing of 1,600,000 Ordinary Shares of 0.002p each to be admitted to trading on AIM. The purpose of ...

Your weekly cybersecurity recap: a GitHub supply chain worm, an exploited Android flaw, Instagram account takeovers, and a ...