Code Security

Massive npm Dependency Confusion Attack Infiltrates Corporate Ecosystems

npm dependency confusion attack malicious packages discovered

Massive npm Dependency Confusion Attack Infiltrates Corporate Ecosystems

Do Son May 30, 2026

Microsoft Threat Intelligence researchers recently uncovered an active security breach targeting modern software developer pipelines. Specifically, a...

New GitLab Security Updates Fix Critical Flaws in Duo AI GitLab security updates Duo AI flaw fixed GitLab Runner Hijack, DoS Fix GitLab GraphQL Flaws, CVE-2025-11340 CVE-2024-9693 GitLab vulnerability, XSS

GitLab security updates Duo AI flaw fixed GitLab Runner Hijack, DoS Fix GitLab GraphQL Flaws, CVE-2025-11340 CVE-2024-9693 GitLab vulnerability, XSS

New GitLab Security Updates Fix Critical Flaws in Duo AI

Do Son May 29, 2026

GitLab has issued an urgent set of software modifications to safeguard development pipelines. Specifically, these new GitLab...