Compromised npm packages targeted Red Hat cloud services, enabling credential theft and expanding supply chain risks.

Official Red Hat NPM accounts have been compromised and used to push a malicious worm that spreads from machine to machine, ...

Days after IBM and Red Hat announced a master security plan for open-source software, Red Hat suffers a major breach of its ...

More than 30 npm packages under Red Hat's '@redhat-cloud-services' namespace were compromised in a supply-chain attack that distributed a new variant of the Shai-Hulud credential-stealing malware, ...

An autonomous AI agent built on Claude Opus reportedly chained together zero-day vulnerabilities in GitHub Actions workflows, ...