JFrog found malicious npm packages that deploy a Windows RAT to steal Chrome credentials, run commands, and transfer files.

Vienna, Austria, June 25, 2026 — digna, the European data quality and observability platform, today announced the release of digna 2026.06, introducing a new Python SDK and Docker deployment support ...

Researchers have uncovered a supply-chain attack that hides in Python packages, propagates like a worm, and tricks LLM-based code analysis systems into overlooking malicious payloads. Threat actors ...

A rogue AI agent using compromised developer credentials breached the Fedora software supply chain and merged defective code ...

On June 24, 2026, Microsoft’s Digital Crimes Unit (DCU) facilitated the takedown, suspension, and blocking of domains that ...

Our tracking of OceanLotus activities from 2024–2026 reveals a shift in operational focus. During this period, the Vietnam-aligned OceanLotus adopted a more selective approach to external operations ...

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

Microsoft has confirmed that Windows 11 version 26H2 will be the next feature update and that devices running Windows 11 24H2 ...

Check out Python’s powerful new linters and profiling tools, and learn how virtual environments can save you time and trouble ...

Microsoft confirmed Windows 11 26H2 will use an enablement package, giving IT teams a faster upgrade path and support reset ...

Windows 11 26H2 is shaping up to be less about flashy features and more about fixing everyday annoyances users have ...