JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

Unsurprisingly to many of us, app stores for smart televisions are also trash. Perhaps even more full of trash than other app stores due to the smaller ecosystem and fewer reviewers. Spur analyzed ...

A SimpleHelp authentication flaw is being exploited to deploy Djinn Stealer, a cross-platform malware targeting cloud, ...

Notifications never stop coming, and most software solutions for taming them just add another app to ignore. The team behind the Flipper Zero thinks the answer might live outside the screen entirely.

A threat actor has been exploiting CVE-2026-48558, a critical SimpleHelp vulnerability, to drop TaskWeaver and Djinn Stealer ...

Adblock for YouTube has over 11 million installations. However, it can inject script code into any page uncontrollably.

Island found dormant JavaScript injection paths in Adblock for YouTube, a Chrome extension with 10M+ installs, raising ...

Apryse, the leader in enterprise-grade document processing technology, today announced that it has been named “IDP SDK of the ...

On March 17, 2026, MyCard, Inc. (d/b/a Knot) filed a bombshell complaint in the District of Delaware, alleging that it had caught Atomic FI, ...

Cequence Security, a pioneer in application security, today announced the launch of Intent Graph and Biometric Check, two new capabilities that extend the behavioral architecture Cequence has built on ...

In the EU, browser manufacturers are now allowed to use their own engines – but not in the USA. This costs users performance, ...

Vercel introduced an open source agent framework called eve at its Ship event in London this week, along with other new features including Passport, an attempt to put employee apps created with AI ...