A fresh Mini Shai-Hulud supply chain attack has hit over 320 NPM packages, along with GitHub Actions and a VS Code extension, ...
TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...
Q1 2027 Earnings Call May 20, 2026 5:00 PM EDTCompany ParticipantsToshiya Hari - Vice President of Investor Relations ...
Composer 2.5 is Cursor's third-generation proprietary coding agent, available exclusively inside the Cursor IDE and through the @cursor/sdk — not as a general API. Like its predecessor, it is built on ...
Popular JavaScript modules including size-sensor and echarts-for-react hit as hijacked account closed GitHub warnings ...
Four research teams found the same confused deputy failure in Claude across three surfaces in 48 hours. This audit matrix ...
Supply chain attacks with a Dune sci-fi saga branding continue to spread across the open-source ecosystem, with a Microsoft ...
Whether you want simple fire-and-forget alerts or full two-way control, here's how to securely wire your AI agent into Slack.
A new report out today from cybersecurity company Forcepoint LLC’s X-Labs research team details a supply chain attack that ...
TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...
Microsoft adds Grok 4.3 to Foundry with a 200K context window, native productivity tools, and Azure safety protections.