Software security testing outfit Checkmarx has become the latest organization caught up in an ongoing attack on security-tool providers. The biz said data posted online appears to have come from one ...

A Vercel employee's AI tool OAuth grant gave attackers access to internal systems via a four-hop kill chain. Here's what ...

Self-propagating npm worm steals tokens via postinstall hooks, impacting six packages and expanding supply chain attacks.

TL;DR An open source malware campaign dubbed CanisterSprawl has been observed in npm, stealing sensitive data from developer ...

Sam Taube writes about investing for NerdWallet. He has covered investing and financial news since earning his economics degree from the University of Maryland in 2016. Sam has previously written for ...

Vercel confirmed a security incident involving unauthorized access to internal systems, stemming from a compromised ...