A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...

The company Wasmer, which is behind the WebAssembly runtime of the same name, has released Edge.js. The open-source JavaScript runtime specializes in securely executing Node.js workloads in ...

The bug was assigned CVE-2025-2135, and we successfully used it to pwn Google’s V8CTF as a zero-day. The root cause lies in TurboFan’s InferMapsUnsafe() function, which fails to handle aliasing when ...

JavaOne Oracle has shipped Java 26, a short-term release, and introduced Project Detroit, which promises faster interop ...

The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute ...

Gnata, “a pure-Go implementation of JSONata 2.x”, was built in just seven hours, $400 in tokens and a 1,000x speedup on common expressions.

And more useful than I thought.

Another supply chain security threat emerged this week with the compromise of Axios. It is a popular JavaScript HTTP library, but for three hours, it ...

"Now, the person making the call is somebody somewhere who works for (the insurance company). It's not my physician, who's an expert." | Opinion ...

Aqua Security’s Trivy vulnerability scanner compromise is trickling down ...

SGA Global Growth faced Q4 2025 headwinds as cyclical assets outperformed quality growth amid an AI CapEx boom. Read the full ...

Active exploits, nation-state campaigns, fresh arrests, and critical CVEs — this week's cybersecurity recap has it all.