UNC6692 has been attributed to a large email campaign that's designed to overwhelm a target's inbox with a flood of spam ...

Self-propagating npm worm steals tokens via postinstall hooks, impacting six packages and expanding supply chain attacks.

A cyber group is impersonating IT helpdesk staff via Microsoft Teams to deploy malware and target corporate systems.

Researchers linked 108 malicious Chrome extensions to a coordinated campaign that exposed about 20,000 users to data theft, ...

Malicious npm packages have been identified distributing malware that steals credentials and attempts to spread across ...

Google is rolling out Skills to the Gemini sidebar in Chrome, letting you save any prompt—as simple as "summarize this tab" ...

I'm still mad about dependency hell though.

Microsoft officially announced TypeScript 7.0 Beta on April 21, 2026. The company says TypeScript 7.0 is often 10 times faster than 6.0. The beta ships through @typescript/native-preview@beta and tsgo ...

AI chatbots make it possible for people who can’t code to build apps, sites and tools. But it’s decidedly problematic.

Canonical has just announced the release of Ubuntu 26.04 LTS “Resolute Raccoon” Linux distribution about two years after ...

Yet another npm supply-chain attack is worming its way through compromised packages, stealing secrets and sensitive data as ...

The activity centres on unauthenticated ComfyUI deployments and the platform’s custom node ecosystem, which lets users add third-party extensions to expand functions. Security researchers say ...