SpyCloud, the leader in identity threat protection, today announced the launch of its Supply Chain Threat Protection solution ...

A supply chain attack on n8n injected malicious community nodes to steal user OAuth tokens, highlighting critical risks in ...

A recent supply chain malware attack affected popular NPM packages, potentially reaching millions of downloads in just a few ...

Malicious npm packages posing as n8n community nodes were used to steal OAuth tokens by abusing trusted workflow integrations ...

IBM’s experimental coding assistant “Bob” was pitched as a way to automate routine development tasks, but security ...

A dramatic spike in npm-focused intrusions shows how attackers have shifted from opportunistic typosquatting to systematic, credential-driven supply chain compromises — exploiting CI systems, ...

Attackers in 2025 scale proven tactics like supply chain attacks, phishing, and store malware using automation and AI.

Trust Wallet confirms a “malicious update” compromised its Chrome extension, exposing users to crypto theft in a browser supply chain attack.

A newly discovered third variant of the Shai Hulud malware is raising fresh concerns about the security of the open-source software supply chain, as researchers warn that the latest version shows more ...

Hackers are exploiting a side-loading flaw in a signed GitKraken executable to bypass defenses and deploy trojans, stealers, ...