The researchers are calling the threat actor WhiteCobra.

Dozens of npm libraries, including a color library with over 2 million downloads a week, have been replaced with novel self-replicating credential-stealing code in yet another wave of a supply chain ...

Microsoft released Visual Studio Code 1.104, adding Auto model selection and support for contributed language models in chat, alongside security, productivity, and Model Context Protocol (MCP) ...

Your weekly strategic brief on the cyber threat landscape. Uncover the deeper patterns behind attacks, from bootkit malware ...