After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB ...
A widely used Python package with more than 95 million monthly downloads has been compromised with credential-stealing ...
If you suspect you were running a compromised version, treat all pipeline secrets as compromised and rotate immediately,’ ...
The TeamPCP hacking group has hacked the Telnyx PyPI package as part of a supply chain campaign targeting the broad OSS ecosystem.
The Kubernetes community retired Ingress NGINX this month after years of under-resourcing. The migration scramble it ...
IBM Cloud, Nutanix, OVHcloud, SUSE, TIBCO, and others standardize on Traefik Proxy, the only open source drop-in replacement for ingress NGINX with over 90% annotation coverage, as the ...
A financially motivated data theft and extortion group is attempting to inject itself into the Iran war, unleashing a worm ...
The compromised packages, linked to the Trivy breach, executed a three‑stage payload targeting AWS, GCP, Azure, Kubernetes ...
Malicious telnyx 4.87.1/4.87.2 on PyPI used audio steganography March 27, 2026, enabling cross-platform credential theft.
This tiny app replaces Google Drive entirely.
Six security teams shipped six OpenClaw defense tools in 14 days. Three attack surfaces survived: runtime semantic ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results