OpenAI released GPT-5.6-Cyber through Daybreak, three days after pausing Astra over critical cyber risk. It completes 95% of requests Sol refuses.

A supply-chain attack on the widely used Axios JavaScript library has raised fresh concern over the fragility of open-source software distribution after attackers slipped malicious code into two ...

Cloud and SaaS are now the preferred operating environments for threat actors, amid a continued shift to identity attacks ...

North Korean hackers quietly poisoned trusted software packages ...

Security researchers at Kaspersky have uncovered technical evidence linking the massive supply chain attack on the popular ...

Compromising the open-source supply chain is easy to do and spreads more quickly than traditional supply-chain attacks, ...

The cloud computing giant said in a blog post on July 29 that compromises of the axios, debug, chalk and typo-crypto libraries were carried out by the same group, known as Saphire Sleet, BlueNoroff ...

AWS Links Npm Attacks To North Korean Hackers Arabian Post. clearfix>Amazon Web Services has attributed a series of compromises involving widely used npm software packages, including Axios, Debug and ...

A DPRK-linked threat actor has been tied to four separate compromises of widely used JavaScript libraries since March 2025, ...

Amazon threat researchers found one threat actor behind four distinct open source compromises, including the March 2026 ...

Amazon Threat Intelligence has tied a DPRK hacking group to four separate npm package supply chain attacks, including axios. The company’s security teams have connected the axios, debug, chalk, and ...