A massive, fast-moving software supply chain attack has struck the global JavaScript development ecosystem. Over the past...
Token Theft
Coder, the prominent self-hosted platform used by enterprises to build cloud development environments and manage AI coding...
The popular open-source identity and access management solution Keycloak has released a critical security update, version 26.5.7,...
GitLab has released a sweeping security update for its Community (CE) and Enterprise (EE) editions, patching a...
Cybercriminals have found a new way to turn corporate security protocols against themselves, weaponizing a legitimate Microsoft...
ASUS has issued security updates to patch two vulnerabilities in its MyASUS software, a pre-installed utility application...
Socket’s Threat Research Team has discovered that at least 10 malicious packages were published to npm from...
The Socket research team has identified a malicious Python package on PyPI named pycord-self, targeting developers working...