GlassWorm malware uses a Zig-based dropper to infect developer tools, stealing data and spreading across IDEs.

Schibsted’s decision to open-source its text-to-video tooling is another powerful signal — not just a product release but a ...

FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...

Sonatype®, the leader in AI-driven DevSecOps, today unveiled the Q1 2026 Open Source Malware Index, identifying 21,764 malicious open source packages in the first quarter of the year and bringing the ...

Expo, the developer of a popular open-source tool for building cross-platform applications, today announced that it has ...

Malwarebytes recently uncovered a new malicious campaign targeting the Windows Update service. Focused on French-speaking users, the campaign uses layered obfuscation techniques to deliver multiple ...

Overview:TypeScript improves code safety, but overusing “any” removes its main advantage.Clear types, strict settings, and ...

According to the company, this opens a whole new horizon. It also means developers can bring their favorite coding agents ...

Checkmarx, the global leader in agentic application security, is proud to announce it has won Market Leader Application Security from Cyber Defense ...

Last week, something alarming happened in the world of software — and almost nobody outside the tech industry noticed. A ...

A Grafana AI flaw enables zero-click data exfiltration by hiding malicious prompts in URLs, said a Noma Security report.

A credit card skimmer campaign discovered in early 2025 and still actively tracked as of April 2026 has compromised an ...