North Korean hackers are targeting open source software developers with a backdoor and an information stealer as part of a ...

In a photo taken on June 14, 2018, students wearing Korean People's Army (KPA) uniforms sit before computer screens as they attend a class at the Mangyongdae Revolutionary School outside Pyongyang.

As many as 145 npm packages associated with the Mastra namespace ("@mastra/*"), a popular open-source JavaScript and TypeScript framework for building artificial intelligence (AI) applications, have ...

On May 11, 2026, a self-replicating worm called Mini Shai-Hulud quietly slipped into 42 widely used TanStack open-source packages, corrupting 84 npm artifacts before anyone noticed. Within hours, the ...

Novel attack method: Hackers poisoned four SAP npm packages and used AI coding assistant configs to spread malware, a first in documented supply chain attacks. Credential theft impact: The malware ...

TeamPCP's extensive supply chain campaign continued this week, as the cybercriminal group compromised several SAP npm packages in a "Mini Shai Hulud" attack. The compromised packages went live ...

Scope enforcement proxy for AI-driven penetration testing. The IntegSec Agentic Pentest MCP Proxy sits between an AI agent (Claude, GPT, etc.) and an MCP tool server (TurboPentest, Nuclei MCP, etc.), ...

The post AI Vulnerability Chaining – Why Your Security Stack Cannot Detect What Comes Next appeared first on Deepak Gupta | AI & Cybersecurity Innovation Leader | Founder's Journey from Code to Scale.

On March 31, NSFOCUS CERT detected that the npm repository of the HTTP client library Axios was poisoned by the supply chain. The attacker bypassed the normal GitHub Actions CI/CD pipeline of the ...

The AppsFlyer Web SDK was temporarily hijacked this week with malicious code used to steal cryptocurrency in a supply-chain attack. The payload can intercept cryptocurrency wallet addresses entered on ...

Tech start-up Anthropic has refused to meet the Pentagon's demands for unrestricted military use of AI, setting up a legal showdown with the Trump administration. Artificial intelligence lab Anthropic ...

Microsoft Defender Experts identified a coordinated developer-targeting campaign delivered through malicious repositories disguised as legitimate Next.js projects and technical assessment materials.