Attacks on the NX build system and React packages highlight escalating threats to enterprise software development pipelines.

DEF CON happened just a few weeks ago, and it’s time to cover some of the interesting talks. This year there were two talks ...

A software supply chain attack targeting Nx marks the first known case where attackers have leveraged developer AI assistants ...

Visual Studio Code extensions have been identified exploiting a loophole that allows reuse of names from removed packages ...