Microsoft’s GitHub has suffered what appears to be its biggest ever security breach after confirming that attackers ...

A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious ...

MESCIUS USA, Inc., a global provider of award-winning enterprise software development tools, is pleased to announce a new product for the Document Solutions product line: Document Solutions PDF JS.

The OWASP-backed tool scans JavaScript and TypeScript lockfiles locally, aiming to help developers catch and remediate dependency risks before CI failures.

The Shai-Hulud supply-chain malware campaign is exploiting the automated systems developers trust to publish software safely.

GlassWorm poisoned 300 GitHub repositories since 2025, enabling supply chain attacks against developers and organizations.

Veena Sriram is an assistant professor and Canada Research Chair in Global Health Policy at the University of British ...

Bumblebee from Perplexity scans developer machines for compromised packages and AI tool configs, without triggering malware.

Socket is scaling to defend open source against supply chain attacks as AI accelerates software development. SAN ...

Ghost CMS flaw CVE-2026-26980 enabled attacks on 700+ sites, injecting ClickFix malware through fake CAPTCHA pages.

Reported over three years ago and allegedly still not properly fixed, the vulnerability enables attacks to execute JavaScript ...

Socket raises $60M to expand AI-driven software supply chain security and protect developers from cyber threats worldwide.