On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...

I’ve used plenty, but this one rewired my daily workflow.

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

Malicious telnyx 4.87.1/4.87.2 on PyPI used audio steganography March 27, 2026, enabling cross-platform credential theft.

On March 19, 2026, a threat actor known as TeamPCP compromised Aqua Security’s Trivy vulnerability scanner – the most widely adopted open-source scanner in the cloud-native ecosystem. The attacker ...

Chainguard is racing to fix trust in AI-built software - here's how ...

OpenAI Group PBC today announced plans to acquire Astral Software Inc., a startup with a set of widely used Python development tools. The terms of the deal were not disclosed. Astral’s development ...

In addition to rolling out patches to address two zero-days affecting SQL Server and .NET, Microsoft introduced Common Log File System hardening with signature verification.

SpaceX is planning a Friday the 13th rocket launch from California at the Vandenberg Space Force Base. Here's where to see the Falcon 9 lift off.

ShellBags are the little-known features of Windows. We rarely come across ShellBags, not only as a feature but also as a word. The ShellBags on a Windows PC contain a lot of information about the ...