GlassWorm malware uses a Zig-based dropper to infect developer tools, stealing data and spreading across IDEs.

Malwarebytes recently uncovered a new malicious campaign targeting the Windows Update service. Focused on French-speaking users, the campaign uses layered obfuscation techniques to deliver multiple ...

GlassWorm uses a fake WakaTime VS Code extension to infect IDEs, deploy RATs, and steal data, prompting urgent credential ...

The biggest story of the week is a new massive supply chain breach, which appears to be unrelated to the previous massive supply chain breaches, this time of the Axios HTTP project. Axios was ...

OpenAI is one of many organizations affected by the recent Axios supply chain attack attributed to North Korean hackers.

AI chatbots make it possible for people who can’t code to build apps, sites and tools. But it’s decidedly problematic.

North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.

These changes will predictably reduce access to essential care, worsen health outcomes and increase pressure on already ...

OpenAI is asking Mac users to update ChatGPT, Codex, Atlas, and Codex CLI after a security issue involving Axios and macOS ...

This is GlassWorm: a software supply chain attack that security researchers are calling one of the most sophisticated and ...