A Dune-inspired worm recently hit CrowdStrike and npm, infecting hundreds of packages. Here's what happened - and how to protect your code.

The novel malware strain is being dubbed Shai-Hulud — after the name for the giant sandworms in Frank Herbert’s Dune novel ...

From what makes a good password to the strongest two-factor authentication methods, here are tips on how to avoid becoming a ...

Explore emerging attack methods, evolving AI-driven threats, supply chain risks, and strategies to strengthen defenses and ...

ESET researchers reveal how malware operators collaborate with covert North Korean IT workers, posing a threat to both headhunters and job seekers.

North Korean-linked crews connected to the pervasive IT worker scams have upped their malware game, using more advanced tools ...

"Each published package becomes a new distribution vector: as soon as someone installs it, the worm executes, replicates, and ...

Google is rolling out updated versions of Chrome to the masses, signaling that attackers are exploiting a newly discovered ...

Google patches CVE-2025-10585, the sixth Chrome zero-day exploited in 2025, affecting V8 JavaScript engine with type ...

The latest update to Microsoft’s code editor previews an automatic model selection capability and improvements to agent security.

An infostealer particularly focused on stealing cryptocurrency wallet data from macOS, Windows and Linux users has been ...

In a security advisory, Google said it patched a heap buffer overflow in ANGLE (CVE-2025-10502), a user-after-free bug in WebRTC (CVE-2025-10501), and a separate use-after-free in Dawn (CVE-2025-10500 ...