Code Defence

The “Shai Hulud” supply chain attack has escalated. A new variant, version 2.0, has been detected spreading automatically through CI/CD […]

A critical authentication bypass vulnerability (CVE-2025-59366, CVSS 9.2) has been disclosed in ASUS AiCloud routers. The flaw allows unauthenticated attackers

Microsoft has announced a major security update for Entra ID (formerly Azure AD). The platform will now block the execution

Three major London councils—Kensington and Chelsea, Westminster, and Hammersmith and Fulham—have confirmed they are victims of a coordinated cyberattack. The

North Korean state-sponsored actors are conducting a sophisticated supply chain campaign targeting software developers. They are flooding the npm ecosystem

Researchers have discovered a malicious Chrome extension that injects hidden transfer fees into Solana transactions on the Raydium decentralized exchange.

U.S. House panels have requested testimony from Anthropic and Google following a report that China (PRC) linked actors executed an

GitLab has released critical security updates for its Community (CE) and Enterprise (EE) editions to address multiple high-severity vulnerabilities. These

CISA has issued a high-priority warning regarding state-backed actors using commercial spyware to compromise users of encrypted messaging apps like

The FBI has issued an urgent warning about fake websites spoofing the official Internet Crime Complaint Center (IC3.gov). Scammers are