A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer credentials and attempting to spread through packages published from compromised accounts.

Yubico warns of a search path vulnerability in YubiKey Manager, libfido2 and python-fido2. Updates fix the bugs.

Anthropic fixed a significant vulnerability in Claude Code's handling of memories, but experts caution that memory files will ...

Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.

Anthropic has launched AI connectors integrating Claude with major creative and design platforms, while Xbox introduced its Game Package Manager to simplify game publishing. These updates promise to ...

When Nandakishore Leburu was building LLM applications at LinkedIn, he learned that the models weren't the problem. The security around them was. He's now a Principal Engineer at Walmart, working on ...

Socket’s acquisition of Secure Annex extends software supply-chain security beyond open-source dependencies into browser and ...

Linux apps so good, you'll wonder why you ever clicked anything else.

April 2026 has been and gone, but not before delivering an array of Linux software updates, including new versions of popular ...