ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian ...

IntroductionOn March 12, 2026, Zscaler ThreatLabz discovered a malicious ZIP archive containing military-themed document lures targeting Chinese-speaking individuals. Our analysis of this sample ...

What makes Codex useful for building websites is that it can install software packages, run a local preview server, track ...

The Bitwarden CLI NPM package compromise is tied to a Checkmarx supply chain attack and references the Shai-Hulud worm.

Antigravity Strict Mode bypass disclosed Jan 7, 2026, patched Feb 28, enables arbitrary code execution via fd -X flag.

Say “publish this as a website” and your AI agent handles the rest: it builds the file, uploads it, and hands you a ...

Self-propagating npm worm steals tokens via postinstall hooks, impacting six packages and expanding supply chain attacks.

Hackers are abusing n8n workflows to deliver malware and evade detection, according to Cisco Talos, using trusted automation ...

A compromised developer's repository serves as a worm-like infection vector to spread remote access Trojans (RATs) and other ...

Nearly every major product family needs immediate patching, from Windows to Office to Microsoft Edge, SQL Server, and even ...

Check Point researchers have found that popular AI coding assistants are unintentionally leaking sensitive internal data, ...

With a bonus script that puts any search tool to shame.