AI chatbots make it possible for people who can’t code to build apps, sites and tools. But it’s decidedly problematic.

UTC, Aikido Security detected an unusual pattern across the npm registry: dozens of packages from multiple organizations were receiving unauthorized patch updates, all containing the same hidden ...

Attackers weaponized critical RCE within hours, prompting CISA to add the flaw to its KEV catalog and set an urgent patch deadline.

DeepLoad exploits ClickFix and WMI persistence to steal credentials, enabling stealth reinfection after three days.

A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...

TeamPCP strikes again, with almost identical code to LiteLLM.

PM This week in cybersecurity: botnets, RCE flaws, AI-driven attacks, stealers, and more. Fast, no-fluff roundup.

New AI-powered scanner -- who-touched-my-packages -- detects zero-day malicious packages and credential exfiltration in seconds BOSTON, March 26, 2026 /PRNewswire/ -- Point Wild, a leading global ...

LinkedIn is facing two lawsuits over its practice of scanning users’ browsers to determine which extensions they’re running.

CERT-EU attributed a 92 GB data breach at the European Commission to TeamPCP, which compromised the Trivy security scanner in ...

Looking for an app to help you track expenses, scan invoices, and receipts? We've reviewed the top 6 receipt scanner apps. Find out the best software for you. I’ve tested the best receipt scanning ...