OpenAI has said it found no evidence that user data was accessed following a security issue linked to a supply-chain attack involving the open-source TanStack npm library. The company said in a ...

A new coordinated cross-ecosystem software supply chain attack campaign has targeted npm, PyPI, and Crates.io to distribute credential-stealing malware. The campaign, codenamed TrapDoor, spans more ...

A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious ...

The Anthropic Claude Code source code leak exposed more than a packaging error, it revealed how far ahead attackers are moving with AI while defenders struggle to keep pace.

Palabra.ai, the real-time AI voice translator backed by Seven Seven Six, has crossed $1 million in annual run rate, growing ...