Stay updated on recent software supply chain attacks and learn how new vulnerability tracking metrics change your team ...

The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.

Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...

VS Code 1.127 enhances agent session management, introduces per-site browser permissions, and makes browser tools for agents ...

Or does your small business need a better platform to grow and thrive? You might think you need to be a tech genius or computer programmer to make these things happen. But the good news is, you can ...

North Korean threat actors are escalating the PolinRider supply chain attack across Go, Packagist, and npm package ...

OpenAI unveils Codex Micro, its first hardware product designed for developers. Here's what it is designed to do.

Z.ai has launched ZCode, a free AI coding tool powered by GLM-5.2 that challenges Cursor, Claude Code and GitHub Copilot ...

Trusted developer tools are becoming the new path into enterprise software environments.

Fake Perplexity Chrome extension exploited a legal permission combination to log every address-bar keystroke before ...

Microsoft says these 119 malicious extensions were downloaded a total of 2.6 million times since 2021.

CVE-2026-12957 in Amazon Q is the third MCP auto-execution vulnerability in three AI coding tools. The pattern reveals a ...