ChatGPT for PowerPoint went generally available for Business workspaces on July 6, 2026, with a free window closing August 6.

North Korean state-linked hackers buried a full remote-access toolkit inside six fake npm packages disguised as widely-used Rollup build tooling, JFrog Security Research disclosed June 30 — and the ...

We talk about the weather, we look at the weather. I check the weather online, I listen to the radio all the time. It’s part ...

North Korean hackers are targeting open source software developers with a backdoor and an information stealer as part of a ...

Socket found a compromised Injective npm package stealing wallet keys amid rising crypto supply chain attacks.

Securonix uncovers the Veil#Drop malware framework, which abuses compromised websites and Google Blogspot to deploy the PureLog information stealer.

ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't ...

China's self-driving car firms have been given a headstart by the country's EV supply chain as they expand globally.

Cybersecurity firm Novee has identified a GitHub Actions workflow-chain risk that can expose secrets even when checks pass, ...

Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup polyfill tooling to facilitate remote access and data theft. According to ...

Jen Ellis: Connecting Cyber Community With Political Machinery Security Pro File: On the heels of her recent honors as a Member of the Order of the British Empire (MBE), we take a look back at the ...

The jscrambler npm package was compromised, and simply installing its 8.14.0 release runs an infostealer on your machine. Published on July 11, 2026, the malicious version carries a preinstall hook ...