The Tycoon2FA phishing kit now supports device-code phishing attacks and abuses Trustifi click-tracking URLs to hijack ...

Warp’s cloud agent orchestration platform now supports Claude Code and Codex alongside Warp Agent, giving enterprise engineering teams a single control plane to orchestrate coding agents across models ...

A critical vulnerability in the popular Node.js sandboxing library vm2 allows escaping the sandbox and executing arbitrary ...

It’s time to switch to a new development tool for SQL Server and Azure SQL. Here’s how to get started with the MSSQL ...

Tycoon2FA has returned with new device-code phishing attacks targeting Microsoft 365 users through legitimate OAuth login flows.

The world’s largest open-source registry, node package manager (npm), has been hit by another fast-moving malware attack, ...

TanStack has released a detailed postmortem describing a sophisticated supply-chain attack that compromised 42 npm packages ...

Four npm packages linked to SAP's Cloud Application Programming Model were hijacked. The hackers added code that steals crypto wallet and other sensitive data.

TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...

Claude Code has made the digital photo tool Adobe Lightroom functional on Linux. The project began with a very simple prompt.

Researchers say the campaign uses a browser-based JavaScript VM to hide credential theft and intercept MFA at scale.