The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, repositories, and extensions on GitHub, npm, and VSCode/OpenVSX extensions. Evidence ...
Anthropic is scrambling to contain the leak, but the AI coding agent is spreading far and wide and being picked apart.
DPRK-linked actors use GitHub C2 and LNK phishing in South Korea, enabling persistent PowerShell control and data ...
Supply chain attacks feel like they're becoming more and more common.