The hackers compromised GitHub Action tags, then shifted to NPM, Docker Hub, VS Code, and PyPI, and teamed with Lapsus$.
GitHub is adopting AI-based scanning for its Code Security tool to expand vulnerability detections beyond the CodeQL static ...
Crunchyroll's anti-piracy push continues to yield results, as the streamer's legal team has shut down over 900 third-party ...
Trivy supply chain breach compromises over 1,000 SaaS environments, Lapsus$ joins the extortion wave
Socket and Wiz confirm widespread credential theft and worm‑like propagation, with cached malicious Trivy artifacts still ...
Malicious LiteLLM 1.82.7–1.82.8 via Trivy compromise deploys backdoor and steals credentials, enabling Kubernetes-wide ...
Infinite Campus was breached by ShinyHunters - but says it won't negotiate.
A government-grade iOS exploit kit called DarkSword has been leaked on GitHub, putting hundreds of millions of iPhones ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results