The biggest story of the week is a new massive supply chain breach, which appears to be unrelated to the previous massive supply chain breaches, this time of the Axios HTTP project. Axios was ...
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
North Korean hackers exploit VS Code tasks.json auto-run since Dec 2025 to deploy StoatWaffle malware, stealing data and ...
Anna Schecter is the senior coordinating producer for CBS News and Stations' Crime and Public Safety Unit, based in New York. Investigators with the FBI and Pima County Sheriff's Department said they ...
Investigators pulled video from ‘residual data’ in Google’s systems — here’s how that was possible and what it means for your privacy. Investigators pulled video from ‘residual data’ in Google’s ...
The Linux desktop has continued its slow growth. Linux has been making gains in no small part because of Microsoft Windows' blunders. Users and governments have been losing trust in Windows and ...
The North Korean threat actors behind the Contagious Interview campaign have once again tweaked their tactics by using JSON storage services to stage malicious payloads. "The threat actors have ...