Axios npm Package Hit by Active Supply Chain Attack: What Developers Need to Know
A live Axios npm supply chain attack is putting over 100 million weekly downloads at risk after malicious versions were pushed directly to the registry.
Secure.com News
Stay updated with the latest cybersecurity news, threat intelligence, and industry updates from secure.com.
Browse by Category
Anthropic’s “Too Dangerous to Release” AI Model Was Accessed by Unauthorized Users on Day One
Claude Mythos, Anthropic's restricted AI capable of discovering zero-day exploits, was accessed by unauthorized users through a contractor's credentials on April 7, the same day it...
Mirax Android RAT Turns Devices into SOCKS5 Proxies, Reaching 220,000 via Meta Ads
The Mirax Android RAT has infected over 220,000 Meta platform accounts through malicious ads targeting Spanish-speaking users.
Anthropic’s Mythos Signals a Structural Cybersecurity Shift
Anthropic's latest AI disclosure has cybersecurity experts debating the emerging AI cybersecurity threat landscape.
CISA Flags 6 Actively Exploited Flaws in Fortinet, Microsoft, and Adobe Software
Dateline: April 14, 2026 Introduction The U.S. Cybersecurity and Infrastructure Security Agency added six security vulnerabilities to its Known Exploited Vulnerabilities catalog Monday, warning that attackers...
OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident
OpenAI revoked its macOS app certificate after a compromised Axios library infiltrated its GitHub Actions workflow on March 31.
Critical Marimo Pre-Auth RCE Flaw Now Under Active Exploitation
A critical pre-authentication RCE flaw in Marimo is being actively exploited to steal credentials and any unpatched instance reachable from the internet is already a live...
Juniper Networks Default Password Vulnerability Let Attacker Take Full Control of the Device
A critical Juniper Networks default password vulnerability allows remote attackers to completely take over network devices without any authentication.
Amazon S3 Files Turns S3 Buckets Into Traditional File Systems
Amazon Web Services launched Amazon S3 Files, allowing organizations to access S3 buckets through traditional file system interfaces.
IAM Systems Hit Breaking Point as Identity Visibility Platforms Emerge
Identity visibility platforms are emerging as the answer to fragmented IAM systems that leave enterprises exposed across thousands of applications.
Anthropic’s Claude Mythos Finds Thousands of Zero-Day Flaws Across Major Systems
Introduction Anthropic just dropped a cybersecurity bombshell. The AI company’s new Claude Mythos model discovered thousands of zero-day vulnerabilities across major computer systems through a new...
A Researcher Just Bypassed Claude Code’s Safety Controls 90.5% of the Time
A new study exposes a Claude Code safety bypass rate of 90.5%, raising fresh concerns about how much developers can trust AI coding tools.