Protect your enterprise now from the Shai-Hulud worm and npm vulnerability in 6 actionable steps

Any development environment that installed or imported one of the 172 compromised npm or PyPI packages published since May 11 should be treated as potentially compromised. On affected developer workst [...]

The Shai-Hulud npm worm didn't fake its security check — it earned a legitimate one

An attacker on Tuesday took over the GitHub account of the developer who maintains keyv, a small key-value storage library that npm serves roughly 127 million times a week. Within hours, poisoned vers [...]

Four AI supply-chain attacks in 50 days exposed the release pipeline red teams aren't covering

Four supply-chain incidents hit OpenAI, Anthropic and Meta in 50 days: three adversary-driven attacks and one self-inflicted packaging failure. None targeted the model, and all four exposed the same g [...]

Bose QuietComfort Ultra Earbuds (2nd gen) review: Still a noise-canceling powerhouse

Bose announced its latest earbuds in June, but the QuietComfort Ultra Earbuds (2nd gen) ($299) won’t arrive until early September. Today, though, they’re available for preorder, and I’ve spent t [...]

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and au [...]

Self-replicating Miasma worm hits 73 Microsoft GitHub repositories in supply chain attack

The self-replicating Miasma worm has reached Microsoft‘s own GitHub repositories. GitHub disabled 73 repositories across four Microsoft organisations, including Azure, Azure-Samples, Microsoft, and [...]

How an Oregon court became the stage for a $115,000 showdown between Meta and Facebook creators

Some of the most successful creators on Facebook aren't names you'd ever recognize. In fact, many of their pages don't have a face or recognizable persona attached. Instead, they run pa [...]

Upwork study shows AI agents excel with human partners but fail independently

Artificial intelligence agents powered by the world's most advanced language models routinely fail to complete even straightforward professional tasks on their own, according to groundbreaking re [...]

How President Jimmy Carter Slayed a Dragon and Is Helping to Eradicate an Ancient Disease

President Jimmy Carter, the Carter Center and LifeStraw have waged a war against Guinea Worm disease since 1986. We're now closer than ever to completely eradicating an ancient disease from the p [...]