Code Defence

Researchers have disclosed a weakness in WhatsApp’s API that allowed the scraping of public profile data (photos, “about” text, and […]

As Microsoft rolls out new “Agentic AI” capabilities (Copilot Actions) that can autonomously perform tasks on a user’s behalf, the

A massive automated supply chain attack, dubbed “Shai Hulud,” has flooded GitHub and the npm registry. Attackers have poisoned over

CISA has issued a major alert warning that threat actors are actively leveraging commercial spyware and Remote Access Trojans (RATs)

A new software supply chain campaign dubbed “Sha1-Hulud” has flooded the npm registry with hundreds of malicious packages. These packages,

New research from CrowdStrike reveals that the Chinese AI model “DeepSeek-R1” is significantly more likely to generate code with severe

Real estate finance vendor SitusAMC has confirmed a data breach where hackers stole confidential client data, including accounting records and

CISA has issued an emergency directive ordering federal agencies to patch a critical vulnerability (CVE-2025-61757, CVSS 9.8) in Oracle Identity

Threat actors are actively exploiting a recently patched critical vulnerability in Microsoft Windows Server Update Services (WSUS) to distribute the

A critical authentication bypass vulnerability (CVE-2025-49752) has been disclosed in Microsoft Azure Bastion. The flaw allows remote attackers to bypass