On May 20, GitHub confirmed that a poisoned VS Code extension installed on an employee’s device allowed attackers to gain access to approximately 3,800 internal repositories on the Microsoft-owned platform. […]
1.2K Austin, TX / USA, January 14th, 2026, CyberNewsWire New monitoring capability delivers unprecedented visibility into vendor identity exposures, moving enterprises and government agencies from static risk scoring to protecting […]
6.5K New York, NY, January 14th, 2026, CyberNewsWire Panorays, a leading provider of third-party security risk management software, has released the 2026 edition of its annual CISO Survey for Third-Party […]
AI Security: Closing the Visibility Gap Did you know that four in 10 enterprise applications will incorporate task-specific AI agents this year? Despite this, a recent study by Stanford University […]
ESET researchers provide details on a previously undisclosed China-aligned APT group that we track as PlushDaemon and one of its cyberespionage operations: the supply-chain compromise in 2023 of VPN software […]
Research conducted by Intezer and Checkmarx has revealed a new type of software supply chain attack called ChainJacking, which poses a risk to common admin tools. Vulnerable open-source Go packages […]
