Malicious KICS Docker tags and VS Code versions 1.17.0, 1.19.0 enabled data exfiltration, risking exposed infrastructure ...

The Bitwarden CLI NPM package compromise is tied to a Checkmarx supply chain attack and references the Shai-Hulud worm.

Attackers published a malicious command-line version of the popular open-source password manager to the npm registry and may ...

Hackers have compromised Docker images, VSCode and Open VSX extensions for the Checkmarx KICS analysis tool to harvest ...

CVE-2026-33626 exploited within 13 hours of disclosure, enabling SSRF-based cloud credential theft and internal scanning.

The compromise of a version of Bitwarden's CLI is connected to the ongoing Checkmarx supply chain campaign, but differences in the operational methods of both incidents are making it difficult to ...

Macworld explores how advanced AI models like Anthropic’s Mythos are revolutionizing cybersecurity by identifying software ...

The company is deploying agents to audit model use, monitor device health, and accelerate engineering, even as it warns that ...

The Trump administration (which has argued that scraping an infinite amount of copyright-protected data for training AI ...

Three supply chain attacks hit npm, PyPI, and Docker Hub between April 21–23, 2026. All three targeted secrets: API keys, cloud credentials, SSH keys, and tokens from developer environments and CI/CD ...

We tested Clym's free, open-source accessibility testing suite. An honest review of what it covers, how it works, and whether ...