Any theft of customer data is bad a look, but it's still unclear just how serious this incident is. Here's why.

The Computer Weekly Security Think Tank considers how security leaders can help assure access to the new and innovative cloud ...

GitHub is introducing a set of defenses against supply-chain attacks on the platform that led to multiple large-scale ...

Explore emerging attack methods, evolving AI-driven threats, supply chain risks, and strategies to strengthen defenses and ...

A Dune-inspired worm recently hit CrowdStrike and npm, infecting hundreds of packages. Here's what happened - and how to protect your code.

Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to be the world’s biggest supply-chain attack ever. “Sorry everyone, I should ...

The private repositories of hundreds of organizations were published publicly in the second phase of the Nx supply chain attack. Hackers used the secrets stolen in the recent Nx supply chain attack to ...

Salesloft has revealed that the data breach linked to its Drift application started with the compromise of its GitHub account. Google-owned Mandiant, which began an investigation into the incident, ...

Threat actors had access to Salesloft’s GitHub account between March and June 2025 and performed reconnaissance in preparation for the widespread Salesforce-Salesloft data theft campaign. The data ...

Add a description, image, and links to the cfx-bypass-pro topic page so that developers can more easily learn about it.

Investigations into the Nx "s1ngularity" NPM supply chain attack have unveiled a massive fallout, with thousands of account tokens and repository secrets leaked. According to a post-incident ...