The Cybersecurity and Infrastructure Security Agency (CISA) in the U.S. warned of active exploitation of four vulnerabilities ...

A dramatic spike in npm-focused intrusions shows how attackers have shifted from opportunistic typosquatting to systematic, credential-driven supply chain compromises — exploiting CI systems, ...

Android malware uses AI to trick traditional defenses ...

A misconfigured AWS system that was remediated in August—averting a potentially massive and unprecedented software supply ...

Key takeawaysThe December 2025 Trust Wallet hack shows that vulnerabilities in crypto tools can affect crypto-friendly SMEs, even when attacks target individual users rather than ...

Wiz Research discovered and responsibly disclosed a critical vulnerability in AWS CodeBuild that could have led to a massive platform-wide compromise.

A critical security weakness in Amazon Web Services’ CodeBuild service left GitHub repositories vulnerable to hijacking, raising fresh concerns about the resilience of cloud-based development ...

The first major update in nearly 10 years, jQuery 4.0.0 follows a long development cycle and several pre-releases.

Cybersecurity experts share insights on securing Application Programming Interfaces (APIs), essential to a connected tech world.

2026 text written on a blue flowing binary code background. New Year 2026 celebration concept. 2026 is a pivotal juncture for cybersecurity. What was once considered an operational safety net and a ...

With 2025 coming to a close, Nextgov/FCW asked cybersecurity experts — including former officials, research analysts and providers — to outline their predictions for cybersecurity activity in 2026.

Scanning 5M apps uncovered 42K exposed secrets in JavaScript bundles, revealing major gaps in traditional SAST, DAST, and ...