Code Defence

A massive automated supply chain attack, dubbed “Shai Hulud,” has flooded GitHub and the npm registry. Attackers have poisoned over

CISA has issued a major alert warning that threat actors are actively leveraging commercial spyware and Remote Access Trojans (RATs)

A new software supply chain campaign dubbed “Sha1-Hulud” has flooded the npm registry with hundreds of malicious packages. These packages,

New research from CrowdStrike reveals that the Chinese AI model “DeepSeek-R1” is significantly more likely to generate code with severe

Real estate finance vendor SitusAMC has confirmed a data breach where hackers stole confidential client data, including accounting records and

CISA has issued an emergency directive ordering federal agencies to patch a critical vulnerability (CVE-2025-61757, CVSS 9.8) in Oracle Identity

Threat actors are actively exploiting a recently patched critical vulnerability in Microsoft Windows Server Update Services (WSUS) to distribute the

A critical authentication bypass vulnerability (CVE-2025-49752) has been disclosed in Microsoft Azure Bastion. The flaw allows remote attackers to bypass

Client data from major US financial institutions, including JPMorgan Chase, Citi, and Morgan Stanley, may have been exposed following a

Spanish flag carrier Iberia has notified customers of a data breach stemming from a compromise at a third-party supplier. The