GitHub hack exposed 3,800 internal repos through a poisoned VS Code extension, raising new concerns over developer supply ...

The advanced persistent threat group also relied on SOCKS proxies like SoftEther VPN, tunneling tools that act as a middleman between victim and attacker.

Drupal has patched CVE-2026-9082, a highly critical vulnerability that could allow threat actors to hack websites.

GitHub got hit. A compromised employee computer running a malicious VS Code extension gave attackers a way into the company’s internal repositories, and now a group called TeamPCP is allegedly selling ...

An infected VS Code extension compromised around 3,800 repositories owned by GitHub. And that's something that all developers ...

Binance CZ urges developers to rotate API keys following the exposure of a GitHub internal repository.

A major cyber scare has hit GitHub, with hackers from TeamPCP claiming they accessed nearly 4,000 private repositories, ...

GitHub says a poisoned VS Code extension exposed 3,800 internal repos as Binance founder CZ tells crypto devs to rotate keys.

Hack The Box, the global leader in AI cybersecurity readiness, today released its Cybersecurity Workforce Intelligence Report, revealing how AI is influencing cybersecurity skills, career paths and ...

New Axonius CEO Joe Diamond said the New York-based company is evolving from asset management to asset intelligence by ...

Google has patched an Android ADB bug in the May security patch set. If you have a Pixel phone you should already have the patches, and most other major manufacturers should be close behind.

Microsoft flagged a Mistral AI hack as a supply-chain attack that hid malware in a fake AI library on PyPI. Here's what ...