Eclipse Open VSX has reached 1.0.0, highlighting its role as a vendor-neutral registry for VS Code-compatible extensions.

A flaw in Hugging Face Transformers could allow malicious AI models to execute code, exposing credentials and highlighting AI supply chain risks.

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

Explore the leading application security tools of 2026 designed for enterprises. Understand their features, pricing models, and integration guidance for Indian and APAC businesses to enhance cyber ...

We received early access to Mythos Preview for early capability testing a few weeks back. In this article, we can finally share what we found. About three months ago, Anthropic invited us to help them ...

Immutable Linux is the future of OS security, but the current distributions do have one particular limitation that RakuOS has overcome.

On June 24, 2026, Microsoft’s Digital Crimes Unit (DCU) facilitated the takedown, suspension, and blocking of domains that ...

The hunt is on to find protections against the coming generation of adaptive AI worm malware in order to head off a global incident on the scale of other famous worm events, such as NotPetya, Stuxnet, ...

June was sweltering, but the summer heat didn’t slow down open-source software developers. Last month delivered a wave of app ...

Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in Python proof-of-concept (PoC) repositories ...

Three-Year Audit Of 42 Attacks Exposes Accountability Gap In Security Response 1,369 Killed, 12 Arrests, No Convictions As ...