ChainDrop supply chain compromise: Anatomy of a self-propagating worm
In this article Microsoft Threat Intelligence identified a large-scale npm supply chain attack affecting more than 400 packages…
Anthropic says Claude breached three real companies in cyber tests
Anthropic disclosed on Thursday that three of its Claude models broke into the production systems of three real…
Defending SaaS-based applications against ShinyHunters OAuth abuse
In this article In a series of campaigns observed between mid-2025 and mid-2026, Microsoft identified threat actor activity…
AI Coding Agents Skip Package Verification, and Attackers Are Exploiting It
Every software team that has handed its developers AI coding agents has also handed attackers a new entry…
Microsoft removes GitHub projects after malware compromise
Microsoft has temporarily removed many of its open source projects from GitHub after discovering potentially malicious code in…
OpenAI hit by supply chain attack linked to malicious TanStack packages
OpenAI hit by supply chain attack linked to malicious TanStack packages Pierluigi Paganini May 16, 2026 OpenAI said…
OpenAI says hackers stole some data after latest code security issue
Earlier this week, hackers hijacked several open source projects used by dozens of companies and pushed updates designed…