The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...
Shai-Hulud 2.0 exploited CI/CD pipelines in 2025, exposing shift-left flaws and driving curated catalogs to reduce CVE risk by 99%.
Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...
AWS launched managed OpenClaw on Lightsail for AI agent deployment while security concerns mount. The 250k-star GitHub project is affected by CVE-2026-25253, which enables one-click RCE, with 17,500+ ...