This recap covers exploited flaws, exposed systems, malware campaigns, weak defaults, and the security gaps demanding ...

HalluSquatting exploits AI coding assistants that hallucinate fake repository names, letting attackers register those names ...

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...