CrowdStrike, Google and the Shadowserver Foundation worked together to take down a botnet that poisoned over 300 GitHub repositories, risking widespread supply chain compromise.

GlassWorm poisoned 300 GitHub repositories since 2025, enabling supply chain attacks against developers and organizations.

Eight innovative tools that are reimagining web applications and how we build them. Welcome to the Great Unbloating.

A coordinated malware campaign known as TrapDoor has hit software ecosystems widely used by crypto and blockchain developers.

Socket found seven malicious packages on PyPI The packages were abusing Gmail and WebSocket They were removed from the platform Several malicious PyPI packages were recently observed abusing Gmail to ...

For more than a year, a self-propagating worm rode VS Code extensions, npm packages, and stolen developer credentials through the open-source supply chain. Crow ...

Cryptocurrency developers have become the focus of a new macOS-focused cyber campaign that uses fake recruiter approaches, malicious meeting links and compromised software pipelines to steal digital ...

AI hackathon success stories: seven builders who won by making autonomous AI agents safer. OlympusOS, Deals Machine, Kraken ...

Chainalysis identified $36.7 million in losses from unverified DeFi contracts, warning that AI tools are making hidden smart ...

The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel ...

Palo Alto, California, June 11, 2026 (GLOBE NEWSWIRE) -- Sperax, the DeFi protocol founded in late 2019 and creator of USDs, ...