The novel malware strain is being dubbed Shai-Hulud — after the name for the giant sandworms in Frank Herbert’s Dune novel ...

Aikido Security Ltd. today disclosed what is being described as the largest npm supply chain compromise to date, after ...

JavaScript packages with billions of downloads were compromised by an unknown threat actor looking to steal cryptocurrency.

Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...

New Yorkers are on high alert after a warning about a hack that stole over $1 billion from American citizens, leading to a flurry of FBI alerts. State Attorney General Letitia James sounded the alarm, ...

The malware was found in 18 npm packages that together are usually downloaded over 2 billion times per week. But the security community was quick to act.

Get the latest federal technology news delivered to your inbox. Internet routing giant Cisco disclosed Thursday that the Salt Typhoon hacking group predominantly made use of stolen victim credentials ...

Microsoft has issued an alert about “active attacks” on server software used by government agencies and businesses to share documents within organizations, and recommended security updates that ...

The company said state-backed hacking groups were breaching systems through flaws in SharePoint, which is used by the U.S. government and companies around the world. By Vivian Wang Reporting from ...