DPRK

OPSWAT's latest blog post warns that by 2026, AI-driven file-based attacks, termed 'IntelligentFILE', have become an industrial-scale threat, with global median attacker dwell time rising to 14 days f…

GitHub has revoked npm granular access tokens' ability to bypass two-factor authentication for sensitive account, organization, and package management actions, closing a security gap. The announcement…

On Tuesday, threat actors compromised Jared Wray's GitHub account to publish a worm based on the open-sourced Mini Shai-Hulud malware, spreading to over 400 packages including Keyv and cacheable, with…