Beacon, a CRM provider for charities and nonprofits, says an AWS access key "potentially exposed in public JavaScript build artifacts" is the leading suspect in its July breach.

WordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under ...

China-linked Jewelbug uses XG-Web for espionage and crypto fraud, stealing over 580,000 browser cookies and thousands of ...

Warsaw, Poland, August 12th, 2026, FinanceWire97% of commercial software now runs MIT-licensed open source, and DHTMLX Gantt ...

VS Code model picker now allows users to switch between Anthropic and Copilot providers between turns reconfiguring the agent host. Microsoft has released Visual Studio Code 1.133, an update to its ...

Justin Pruitt, Commercial Real Estate Land Use + Zoning Attorney at Wilson, Cribbs + Goren, joins Traci Pelter, HBJ Publisher ...

CVE-2026-41679, a critical vulnerability in Paperclip, allowed attackers to gain administrative privileges and code execution ...

The Jewelbug hacker group has been carrying out espionage operations targeting governments and militaries while also engaging in cryptocurrency fraud. Although the threat actor has targeted government ...

Meta launches Muse Code, a terminal-based AI coding agent built to handle large software projects and compete with Claude ...

Risky security flaws are found in 45% of AI-generated code tests. Here are the 5 checks that make a vibe coded app safe to ship.

Researchers discovered hackers-for-hire performing cyber espionage and financially motivated heists from the same Web panel.

Upwind identified a malicious release of keyv@6.0.0 that harvested AWS, GitHub, and npm credentials via a hidden preinstall script. With 154 million weekly downloads, the compromise had ecosystem-wide ...