Threat actors have exploited a zero-day vulnerability in the Gogs self-hosted Git service to compromise over 700 ...

Unpatched Gogs flaw CVE-2025-8110 enables file overwrite and code execution, driving over 700 confirmed compromises.

The latest version also executes malicious code during the preinstall phase, and is bigger and faster than the first wave, say researchers. A new version of the Shai-Hulud credentials-stealing ...

CISA details China-linked BRICKSTORM malware that enables persistent, stealthy access in VMware and Windows systems.

Hundreds of trojanized versions of well-known packages such as Zapier, ENS Domains, PostHog, and Postman have been planted in the npm registry in a new Shai-Hulud supply-chain campaign. The malicious ...

This product is what I can only describe as a "homelab in a box", and the HL15 Beast lives up to its name. At its core, it's ...

A China-nexus hacking group has been observed maintaining long-term access and deploying BRICKSTORM malware on compromised servers.

Your open-source stack doesn't have to fall apart. Chaingaurd EmeritOSS will patch dying tools - and prevent them from becoming security risks.

The second Shai-Hulud attack last week exposed around 400,000 raw secrets after infecting hundreds of packages in the NPM (Node Package Manager) registry and publishing stolen data in 30,000 GitHub ...

State prison guards say they are doing so because their jobs have become more dangerous. A New York Times analysis points to a different reality. By Bianca Pallaro and Jan Ransom New York State prison ...