The full breadth of this incident is still unclear, but given the popularity of the compromised package, we expect it will ...

A hacker inserted malware in Axios, an open-source web tool downloaded tens of millions of times weekly, in a widespread hack ...

Since Russian troops invaded Ukraine more than three years ago, Russian technology companies and executives have been widely sanctioned for supporting the Kremlin. That includes Vladimir Kiriyenko, ...

CERT-EU attributed a 92 GB data breach at the European Commission to TeamPCP, which compromised the Trivy security scanner in ...

A quiet compromise of a popular open-source coding editor has turned into one of the most unsettling software supply-chain stories of the year. Attackers silently hijacked the infrastructure behind ...

A state-backed Chinese threat actor known as "UNC5174" is using stealthy techniques and open source software to attack its victims. Cloud security vendor Sysdig published research today regarding ...

A new hacking competition called Zeroday Cloud, focused on open-source cloud and AI tools, announced a total prize pool of $4.5 million in bug bounties for researchers that submit exploits for various ...