CheckMarx confirms March 2026 attack did result in data theft.

This was not a case of stolen credentials, but rather of vulnerability exploitation.

Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...

A new wave of the Glassworm campaign is targeting the OpenVSX ecosystem with 73 "sleeper" extensions that turn malicious ...

Software security testing outfit Checkmarx has become the latest organization caught up in an ongoing attack on security-tool providers. The biz said data posted online appears to have come from one ...

Bitwarden confirmed a 93-minute CLI tool breach affecting only 334 users while password vaults remained secure and encrypted ...

A widely used Python package has been compromised in a supply chain attack. The package, elementary-data, has over one ...

The open-source package elementary-data, with over a million downloads per month, has been compromised. Attackers exploited a vulnerability in a GitHub ...