GitHub disabled 73 repositories across four Microsoft organizations — Azure, Azure-Samples, Microsoft, and MicrosoftDocs — after the self-replicating Miasma worm planted malicious payloads that harves…
A hacker group named TeamPCP has been conducting an unprecedented series of software supply chain attacks, poisoning hundreds of open source tools to extort victims. In the latest incident, the group …
On 20 May 2026, GitHub confirmed that approximately 3,800 internal repositories were exfiltrated after an employee installed a poisoned code editor extension that handed attackers credentials and clou…
The PyTorch Lightning deep-learning framework was compromised on PyPI, with versions 2.6.2 and 2.6.3 containing a credential-stealing worm called Shai-Hulud. The malware activates when Python code run…
A financially motivated cybercrime group called TeamPCP has launched a wiper attack targeting Iran, using a self-propagating worm named "CanisterWorm" that destroys data on systems set to Iran's time …