The Swift Package Index is no longer independent as Apple has taken control, but it will remain an open source search engine for third-party code. The Swift Package Index gave developers one trusted ...

AI security tooling adoption lags behind AI coding tool adoption by an order of magnitude. Download ratios: 10:1 on PyPI, 28:1 on npm. AI-generated code ships vulnerable at baseline. 45% failure rate ...

Microsoft’s monthly update included 206 fixes for flaws in everything from Windows to Office to Exchange Server, not to mention three zero-days.

Apple is opening App Store subscription bundles to developers from different companies, giving independent app makers a new way to package services together and sell them at a combined price. The ...

Apple's recently announced iOS 27 update won't officially ship until the fall, but you can get a taste of the performance improvements and new Siri features the company showed off at WWDC 2026 by ...

Nasha Addarich Martínez Head of Editorial Initiatives and Data Journalism Nasha is the Head of Editorial Initiatives and Data Journalism at CNET. She leads the development and execution of proprietary ...

Researchers have uncovered a new Shai-Hulud malware variant that now also gathers Google Cloud and Azure identities, an addition to its previous credential-snatching behavior. Developers who pulled ...

More than 30 npm packages under Red Hat's '@redhat-cloud-services' namespace were compromised in a supply-chain attack that distributed a new variant of the Shai-Hulud credential-stealing malware, ...

Microsoft Threat Intelligence has uncovered an active supply chain attack involving malicious npm packages registered under organizational scopes that mirror real internal corporate namespaces, ...

Malicious packages across npm, PyPI, and Crates.io show how poisoned developer workflows can become a route into enterprise systems. A malicious package campaign across npm, PyPI, and Crates.io has ...

The Bitwarden CLI was briefly compromised after attackers uploaded a malicious @bitwarden/cli package to npm containing a credential-stealing payload capable of spreading to other projects. Bitwarden ...