Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code ...

Google on Wednesday published exploit code for an unfixed vulnerability in its Chromium browser codebase that threatens ...

The disguised apps use WebView automation, JavaScript injection, and OTP interception to avoid detection and complete fraudulent subscriptions.

A 10-month Android malware campaign has used nearly 250 fake apps to sign victims up to premium services on their mobile ...

A North Korean APT has crafted malicious software packages to appeal to AI coding agents, while ‘slopsquatting’ shows the security risks of hallucinated dependencies.

Attackers are increasingly abusing Microsoft’s legacy MSHTA utility to silently deliver malware, stealers, and persistent ...

The cloud-first digital health development platform provides built-in support for healthcare interoperability standards, ...

HappyHorse MCP brings Alibaba's AI video generation to Claude, Codex & more — now with a limited-time 30% discount ...

CVE-2026-41940 exploitation by 2,000 IPs enabled Filemanager backdoor attacks, causing credential theft and persistent access ...

Attackers performed an email takeover attack on a dormant maintainer account and published new node-ipc versions containing ...

Teachers in Washington state’s Peninsula school district seeking critical feedback on their instruction have a new tool to ...

Claude Code has made the digital photo tool Adobe Lightroom functional on Linux. The project began with a very simple prompt.