The TeamPCP hacking group continues its supply-chain rampage, now compromising the massively popular "LiteLLM" Python package ...
The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed ...
Cybernews researchers uncovered numerous OpenWebUI instances that were silently running malware.
CanisterWorm infects 28 npm packages via ICP-based C2, enabling self-propagation and persistent backdoor access across ...
A critical security vulnerability in Langflow allows attackers to push and execute malicious code on PCs. A security patch is ...
An incident of LinkedIn malware means jobseekers and employers need to take more care with their applications and ...
Hackers have compromised virtually all versions of Aqua Security’s widely used Trivy vulnerability scanner in an ongoing ...
Attackers weaponized critical RCE within hours, prompting CISA to add the flaw to its KEV catalog and set an urgent patch ...
A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...