Security

Someone compromised the Injective Labs GitHub repo and pushed a malicious npm package that steals cryptocurrency wallet private keys and…

Most security messes start as boring admin work. A tool gets trusted. A bucket name gets reused. A setting stays…

Microsoft just took apart a nasty Windows backdoor called GigaWiper. It’s not subtle. What makes it interesting is the design….

Attackers are using years-old GitHub accounts that never posted a single thing to quietly map out corporate infrastructure. And it’s…

GitHub officially released npm version 12, and it comes with a major security change: install scripts are now disabled by…

Microsoft says Windows users should get ready for bigger Patch Tuesdays. The company is leaning heavily on AI to find…

A new data-extortion group called Helix is making the rounds, and its playbook is all about identity tricks. Researchers at…

There’s a new ransomware family in town, and it’s bringing a signed kernel driver to the fight. Researchers at Symantec’s…

Clearinghouses are suddenly everywhere. Over the past few weeks, it seems like every security company announced one. Chainguard did too…

AI hasn’t just changed how fast attacks happen. It’s changed the math entirely. What used to take an attacker days…