A critical vulnerability in the popular expr-eval JavaScript library, with over 800,000 weekly downloads on NPM, can be ...

A widely-adopted JavaScript library has been found carrying a critical vulnerability which could allow threat actors to execute malicious code, remotely.

In the new campaign, Gootloader was most likely leveraged by a group known as Storm-0494, as well as its downstream operator, ...

The typosquatted “@acitons/artifact” package targeted GitHub’s CI/CD workflows, stealing tokens and publishing malicious ...

The GlassWorm malware campaign, which impacted the OpenVSX and Visual Studio Code marketplaces last month, has returned with ...

Cybersecurity researchers have discovered a malicious npm package named "@acitons/artifact" that typosquats the legitimate " ...

"The proliferation of cybercrime services supporting each step of the Booking.com attack chain reflects a professionalization ...

Discover why Android and iPhone devices slow down and learn Bitdefender’s expert fixes to speed up your phone, and keep it ...

The security research team at JFrog, a provider of a platform for building and deploying software, have discovered a critical vulnerability in a node ...

Stingray has signed a definitive agreement to purchase San Francisco-based TuneIn for up to US$175-million, according to a ...

Developers will have to contend with a dormant turned active malicious code on Visual Studio Code (VS Code) extensions, which ...

Chrome dominates the browser market with extenstive site compatibility and a wealth of built-in AI features, but Firefox offers strong privacy protections and other compelling advantages. Here's how ...