Shai-Hulud keeps burrowing: 314 npm packages infected after another account compromise

Popular JavaScript modules including size-sensor and echarts-for-react hit as hijacked account closed GitHub warnings ...
SecurityWeek

Legacy Windows Tool MSHTA Fuels Surge in Silent Malware Attacks

Attackers are increasingly abusing Microsoft’s decades-old MSHTA utility to stealthily deliver stealers, loaders, and ...
Australian Associated Press

Tencent Cloud and Stream Partner to Accelerate the Development of Real-Time Multimodal AI Agents

Through this collaboration, Tencent Real-Time Communication (Tencent RTC) becomes an officially supported edge transport plugin for Vision Agents, giving developers worldwide a lo ...

Four AI supply-chain attacks in 50 days exposed the release pipeline red teams aren't covering

Four supply-chain attacks hit OpenAI, Anthropic, and Meta in 50 days — none inside the model. A 7-row matrix maps what AI ...

Meta 20 May layoff: As ‘doomsday’ nears, anxious employees stock up on free snacks, chargers; apply to jobs preemptively

Employees have described the severance package as unexpectedly generous, calling it a “golden parachute” as the tech firm ...

Anthropic Buys The SDK Pipeline OpenAI And Gemini Depend On

Anthropic acquired Stainless, the SDK compiler behind OpenAI, Gemini and Llama. The deal hands one AI lab structural leverage ...
cybernews

Supply chain hit once again: single NPM account pushes 600+ compromised packages, used by millions

Another massive supply chain attack is spreading. Hundreds of compromised NPM packages are being detected, with hackers using stolen secrets to create over 2,200 public GitHub repositories, all ...