A new report out today from cybersecurity company Forcepoint LLC’s X-Labs research team details a supply chain attack that ...

Microsoft flagged a Mistral AI hack as a supply-chain attack that hid malware in a fake AI library on PyPI. Here's what ...

Microsoft Threat Intelligence said attackers placed malicious code inside a Mistral AI download distributed through a Python ...

TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...

Attackers compromised the official Mistral AI Python package on PyPI along with hundreds of other widely-used developer packages, exposing GitHub tokens, ...

In March 2026, someone hijacked a maintainer account for Axios, a JavaScript HTTP library downloaded more than 45 million ...

On April 30, two releases of one of the most popular machine learning libraries on the Python Package Index were caught ...

Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a vulnerability in the developers’ account workflow that gave access to its signing keys ...

The VIX fell below the 19 line to around 18.82, down 2% on the session, after plunging 28% over the past month as the S&P 500 and SPY hit all-time highs amid cooling fears. CoreWeave (CRWV) ...

Virginia's congressional redistricting referendum passed by a narrow margin. The Fourth Congressional District will now include several new counties and cities. Rep. Jennifer McClellan expressed ...

When Maria looked at herself in the mirror for the first time after her mastectomy, she stood very still. One hand rested on the bathroom counter. The other hovered near the flat space where her ...