Microsoft has released new Canary Builds, 29570.1000 and 28020.1863, for Windows 11 Insiders with improvements like bug fixes ...

Malwarebytes warns that a fake Microsoft support site is distributing password-stealing malware through a spoofed Windows update installer ...

OpenAI revoked its macOS signing certificate after a malicious Axios dependency incident on March 31, 2026, preventing ...

FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...

A convincing Microsoft lookalike tricks users into downloading malware that steals passwords, payments, and account access.

Anthropic accidentally leaked the full source code of Claude code, its flagship AI coding agent on March 31. The code was ...

If you're paying for software features you're not even using, consider scripting them.

Meta has indefinitely paused work with $10B AI data startup Mercor after a LiteLLM supply chain attack exposed training ...

A routine software update for Anthropic's Claude Code tool accidentally leaked its entire source code, sparking rapid community response. Within hours, a developer rewrote the tool in Python and then ...

The source code of Anthropic's CLI tool Claude Code was accidentally made publicly accessible via a source map in the npm registry.

The TeamPCP hacking group has hacked the Telnyx PyPI package as part of a supply chain campaign targeting the broad OSS ecosystem.

Andrej Karpathy, the former Tesla AI director and OpenAI cofounder, is calling a recent Python package attack \"software horror\"—and the details are ge.