Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...

CastleRAT and CastleLoader, active since March 2025, spread malware via phishing and GitHub repos, enabling data theft.

Shady, China-based company, all the apps needed for a fully automated attack - sounds totally legit Villager, a new ...

The latest update to Microsoft’s code editor previews an automatic model selection capability and improvements to agent ...

A known Chinese advanced persistent threat (APT) group known as Mustang Panda is the likely culprit behind a sophisticated, ongoing cyber-espionage campaign. It starts with a malicious email, and ...

In the AI world, a vulnerability called a "prompt injection" has haunted developers since chatbots went mainstream in 2022. Despite numerous attempts to solve this fundamental vulnerability—the ...

A tool can be used well or poorly, but much of the time it is neither inherently good nor bad. Take vibe coding, the act of using natural language to instruct an LLM to generate code. Applied poorly, ...

IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals ...

Explore the essential DevOps tools for 2025 that enhance automation, monitoring, and collaboration. Discover the latest technologies including IaC, CI/CD, conta ...