A Dune-inspired worm recently hit CrowdStrike and npm, infecting hundreds of packages. Here's what happened - and how to protect your code.

The novel malware strain is being dubbed Shai-Hulud — after the name for the giant sandworms in Frank Herbert’s Dune novel ...

From what makes a good password to the strongest two-factor authentication methods, here are tips on how to avoid becoming a ...

Explore emerging attack methods, evolving AI-driven threats, supply chain risks, and strategies to strengthen defenses and ...

ESET researchers reveal how malware operators collaborate with covert North Korean IT workers, posing a threat to both headhunters and job seekers.

North Korean-linked crews connected to the pervasive IT worker scams have upped their malware game, using more advanced tools ...

Google patches CVE-2025-10585, the sixth Chrome zero-day exploited in 2025, affecting V8 JavaScript engine with type ...

"Each published package becomes a new distribution vector: as soon as someone installs it, the worm executes, replicates, and ...

Google is rolling out updated versions of Chrome to the masses, signaling that attackers are exploiting a newly discovered ...

An infostealer particularly focused on stealing cryptocurrency wallet data from macOS, Windows and Linux users has been ...

In a security advisory, Google said it patched a heap buffer overflow in ANGLE (CVE-2025-10502), a user-after-free bug in WebRTC (CVE-2025-10501), and a separate use-after-free in Dawn (CVE-2025-10500 ...

Chainguard Libraries for JavaScript include builds that are malware-resistant and built from source on SLSA L2 infrastructure ...