New AI-powered scanner -- who-touched-my-packages -- detects zero-day malicious packages and credential exfiltration in seconds BOSTON, March 26, 2026 /PRNewswire/ -- Point Wild, a leading global ...

Threats actors pounced on the vulnerability within hours of its disclosure, demonstrating that organizations have little time to address critical bugs.

The Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are actively exploiting a critical ...

Artificial intelligence is rapidly transforming how organizations operate, analyze data, and develop new products. For ...

Aqua Security’s Trivy vulnerability scanner compromise is trickling down ...

Apple is adding 100+ new App Store Connect metrics, giving developers deeper, first-party insights into monetization, ...

Langraph Deploy CLI lets developers create, test, and deploy AI agents from the terminal, with templates and langraph deploy ...

Securing dynamic AI agent code execution requires true workload isolation—a challenge Cloudflare’s new API was built to solve.

After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB of data.

The compromised packages, linked to the Trivy breach, executed a three‑stage payload targeting AWS, GCP, Azure, Kubernetes configs, SSH keys, and automation pipelines before being removed.

The company released updates to Sora on a regular cadence all the way through this week, making the news of the shutdown even more abrupt.

The TeamPCP hacking group continues its supply-chain rampage, now compromising the massively popular "LiteLLM" Python package on PyPI and claiming to have stolen data from hundreds of thousands of ...