December 2025, the RondoDox botnet operators have been targeting Next.js servers impacted by the React2Shell vulnerability.

Apple’s App Store source map leak shows a preventable risk we found in 70% of organizations shipping production web apps.

The key themes that defined the year behind us will also shape the one ahead. The most-read articles of 2025 tracked a return ...

Hackers behind the Shai Hulud malicious npm JavaScript campaign are likely testing a new variant of the malware. Security ...

More than a dozen Firefox extensions were found to be malicious, planting backdoors and keeping track of user browsing habits, experts have warned. This is according to security researchers from Koi ...

A new wave of the GlassWorm malware is now targeting macOS developers by hiding malicious code inside fake Visual Studio Code ...

A newly discovered third variant of the Shai Hulud malware is raising fresh concerns about the security of the open-source software supply chain, as researchers warn that the latest version shows more ...

Citing issues with logic, correctness, and security, a new report recommends specific guardrails for AI-generated code.

A fourth wave of the "GlassWorm" campaign is targeting macOS developers with malicious VSCode/OpenVSX extensions that deliver ...

December 2025 was a brutal reality check for security teams. While most were winding down for the holidays, threat actors weaponized a tectonic shift in the landscape, headlined by the... The post Top ...

The European Space Agency (ESA) confirmed that attackers recently breached servers outside its corporate network, which ...