A hardcoded ClickUp API key exposed hundreds of corporate and government emails for over a year, raising new SaaS security ...
Checkmarx has confirmed that hackers stole data from its GitHub environment one week after hacking it to publish malicious ...
Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal ...
PocketOS founder Jeremy Crane claims a Cursor agent running Claude Opus wiped production data and backups through a single ...
SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.