Stay updated with the latest cybersecurity news, threat intelligence, and industry updates from secure.com.
A single compromised npm maintainer account pushed 637 malicious package versions in 22 minutes, forcing npm to invalidate write-access tokens platform-wide. The Mini Shai-Hulud worm keeps...
Security researchers discovered a critical nginx zero day vulnerability that grants attackers remote code execution access to millions of servers.
A poisoned plugin slipped past one of the most security-conscious companies on the internet, and the GitHub VS Code extension breach now puts every developer endpoint...
The Storm-2949 threat group executed a complex Microsoft Entra ID attack to steal sensitive data from corporate cloud environments.
A fresh npm supply chain attack tied to the Mini Shai-Hulud worm has poisoned hundreds of @antv packages, putting developer credentials at risk.
Microsoft has officially confirmed that its May 2026 Patch Tuesday update for Windows 11 is failing with error code 0x800f0922.
Security researchers discovered four malicious npm packages designed to steal SSH keys, cloud credentials, and cryptocurrency wallets from developers.
The Grafana GitHub token breach saw attackers steal a privileged token, exfiltrate the codebase, and try to extort the company. Grafana said no.
The TanStack npm supply chain attack reached OpenAI's internal repositories. Here is the full picture of what actually happened.
A newly disclosed NGINX vulnerability lay dormant in the codebase for 18 years before an AI system pulled it into daylight.
The SailPoint GitHub breach exposes how supply chain security and identity infrastructure remain the softest targets in enterprise defense.
A new macOS malware campaign exploits Google Ads and Claude.ai shared chat features to distribute malicious software through fake AI applications.