In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

Learn the important Racket concepts with practical examples, from functions and recursion to macros, contracts, streams, and ...

According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD ...

Home Assistant 2026.7 simplifies automation with new intuitive triggers, an activity timeline, grouped updates, and many integrations.

North Korean threat actors are escalating the PolinRider supply chain attack across Go, Packagist, and npm package ...

Attackers are realizing that instead of hacking a hardened server, they can just trick one developer into installing a malicious plugin to steal all the keys to the kingdom. I spent the first week of ...

Two Linux kernel local privilege escalation vulnerabilities have been publicly disclosed within a week of each other. Copy Fail (CVE-2026-31431), disclosed on 29 April 2026 by security firm Theori, ...

On April 29, 2026, security researchers at Theori and Xint Code publicly disclosed CVE-2026-31431, a Linux kernel privilege escalation vulnerability they named Copy Fail. Any unprivileged local user ...

In yet another software supply chain attack, threat actors have managed to compromise the popular Python package Lightning to push two malicious versions to conduct credential theft. As of writing, ...

A global campaign dubbed ShadowRay 2.0 hijacks exposed Ray Clusters by exploiting an old code execution flaw to turn them into a self-propagating cryptomining botnet. Developed by Anyscale, the Ray ...

An investigation into what appeared at first glance to be a “standard” Python-based infostealer campaign took an interesting turn when it was discovered to culminate in the deployment of a ...