Socket and Endor Labs discovered a new TeamPCP campaign leading to the delivery of credential-stealing malware ...

Malicious telnyx 4.87.1/4.87.2 on PyPI used audio steganography March 27, 2026, enabling cross-platform credential theft.

An attack on the open-source library for connecting to LLMs has apparently occurred, allowing two compromised packages to ...

Strapi plugins exploit Redis and PostgreSQL via postinstall scripts, enabling persistent access and data theft.

TIOBE Index for March 2026: Top 10 Most Popular Programming Languages Your email has been sent Python keeps the top spot as its rating dips again, C climbs further in second, and the bottom stays ...

TeamPCP is exploring ways to monetize the secrets harvested during supply chain attacks, with identified ties to the Lapsus$ ...

On the morning of March 24, 2026, tens of thousands of software developers working on AI applications were unknowingly exposed to malware.

Fraudsters often target the accounts of the deceased or their grieving relatives. Here’s how to keep the scammers at bay. This month in security with Tony Anscombe – March 2026 edition The past four ...