Application security company Checkmarx has confirmed that the LAPSUS$ threat group leaked data stolen from its private GitHub ...

Gemini CLI CVSS 10.0 flaw in versions below 0.39.1 enabled RCE in CI workflows, forcing Google to mandate explicit workspace ...

SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.

CheckMarx confirms March 2026 attack did result in data theft.

The signature gap in traditional document tracking. Document tracking systems were built to confirm what arrived, not to evaluate what is already there. Institutions flag unfulfil ...

No member of the Sackler family — the billionaire dynasty that owned and ran Purdue Pharma — has ever been criminally charged ...

Sponsored by OpenAI, Warp launches an open-source ADE where users can submit ideas and watch agents build and ship them ...

A flaw in Cursor’s AI agent lets malicious repositories trigger arbitrary code execution through routine Git operations, now ...

Thanks to cloud agents, remote coding sessions can now be started from within the IDE, and the C++ code editing tools are ...

Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...

ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian ...

The April update suppresses Copilot completions while IntelliSense is active, addressing a long-running editor conflict.