Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...

The Contagious Interview campaign weaponizes job recruitment to target developers. Threat actors pose as recruiters from crypto and AI companies and deliver backdoors such as OtterCookie and ...

Cybernews researchers uncovered numerous OpenWebUI instances that were silently running malware.

ClickFix campaigns spread MacSync macOS infostealer via malicious Terminal commands since Nov 2025, targeting AI tool users ...

Chainguard is racing to fix trust in AI-built software - here's how ...

AI coding tools and autonomous agents are generating more code, pulling in more dependencies, and interacting with open source at a scale humans have never seen before," said Dan Lorenc, CEO and ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

All the nation-state hackers are vibe coding. Vibeware won't win any coding awards. It's not pretty. It doesn't target any zero-day vulnerabilities or known flaws ...

Strong growth is colliding with a vanishing entry-level rung. Read more at straitstimes.com. Read more at straitstimes.com.

A Hong Kong court has ruled that two Tiananmen vigil activists have a case to answer over calls to “end one-party rule” in China in a subversion trial under the Beijing-imposed national security law.

A sophisticated Python-based malware deployment uncovered during a fraud investigation has revealed a layered attack involving obfuscation, disposable infrastructure and commercial offensive tools.