Antigravity Strict Mode bypass disclosed Jan 7, 2026, patched Feb 28, enables arbitrary code execution via fd -X flag.

A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer credentials and attempting to spread through packages published from compromised accounts.

A new Mirai-based malware campaign is actively exploiting CVE-2025-29635, a high-severity command-injection vulnerability ...

The security defects could be exploited for remote code execution, OS command injection, and WAF detection bypass.

Fake packages aim to steal data, credentials, and secrets, and to infect every package created using them, in what could be ...