Cyberattacks

Cyberattacks | News, how-tos, features, reviews, and videos

OpenAI’s cyber defense letter gets the diagnosis right and the prescription wrong

More than 100 organizations just put their names on a warning that AI-enabled attacks will get far worse within months. Nearly every remedy they proposed activates after the attacker is already running code.

By Brad LaPorte

Sep 21, 20266 mins

CyberattacksCybercrimeData and Information Security

AntV data visualization tool the latest to be hit by ongoing npm supply chain attacks

By John E. Dunn

May 19, 20264 mins

CyberattacksCybercrimeDevelopment Tools

Mistral AI SDK, TanStack Router hit in npm software supply chain attack

By John E. Dunn

May 12, 20264 mins

Application SecurityCyberattacksDevSecOps

Articles

SAP npm package attack highlights risks in developer tools and CI/CD pipelines

Researchers say the campaign targeted developer credentials and cloud secrets while abusing trusted publishing and AI coding tool configurations.

By Prasanth Aby Thomas

Apr 30, 2026 4 mins

CyberattacksCybercrimeDevelopment Tools

Anthropic employee error exposes Claude Code source

A version of the AI coding tool in Anthropic's npm registry included a source map file, which leads to the full proprietary source code.

By Howard Solomon

Mar 31, 2026 5 mins

Artificial IntelligenceData BreachSecurity

OpenAI admits data breach after analytics partner hit by phishing attack

Mixpanel warns of phishing attacks after criminals steal email addresses and organization IDs from some customer profiles.

By John E. Dunn

Nov 27, 2025 5 mins

APIsCyberattacksData Breach

NPM attacks and the security of software supply chains

Process improvements and a closer look at funding streams will provide far more protection for the open source software we depend on than isolated guardrails.

By Matt Asay

Sep 22, 2025 7 mins

CyberattacksOpen SourceSecurity Practices

GitHub suffers a cascading supply chain attack compromising CI/CD secrets

CISA confirms cascading attack from reviewdog to tj-actions exposed sensitive credentials across 23,000+ repositories.

By Gyana Swain

Mar 19, 2025 5 mins

Build AutomationData BreachEngineer

Thousands of open source projects at risk from hack of GitHub Actions tool

Researchers say compromised tool in the GitHub CI/CD environment stole credentials; infosec leaders need to act immediately.

By Howard Solomon

Mar 17, 2025 5 mins

Data BreachVersion Control SystemsVulnerabilities

Large language models hallucinating non-existent developer packages could fuel supply chain attacks

LLMs could be exploited to launch waves of “package confusion” attacks, first major study into package hallucination finds.

By John E. Dunn

Sep 30, 2024 5 mins

CyberattacksGenerative AISoftware Development

How likely can terrorists, nuclear attacks, or hackers take down the cloud?

A recent report estimates a huge financial cost to cloud users, which business insurance won’t cover. But is this something you really need to worry about?

By David Linthicum

Jan 26, 2018 2 mins

Cloud ComputingCyberattacks

Winter is coming. Protect your content kingdom

The struggles that HBO is facing are prime examples of a breach of confidentiality by a trusted user or group who bypassed multiple security controls to leak sensitive intellectual property

By Isabelle Guis

Aug 22, 2017 5 mins

Access ControlCyberattacksHacking

McAfee: Wave of Shamoon cyberattacks coordinated by a single group

The campaigns are bigger and more sophisticated, and they're causing far more damage as the attackers learn new techniques and collaborate with other groups

By Fahmida Rashid

Apr 26, 2017 6 mins

CyberattacksHackingPhishing

Microsoft's president wants a Geneva Convention for cyberwar

Brad Smith calls for international agreements on digital rules of engagement

By Blair Frank

Feb 14, 2017 3 mins

CyberattacksCybercrimeTechnology Industry

RSA Conference preview: The agenda can't keep up

The latest, scariest, most sophisticated threats are too fresh for the RSA Conference to cover, but the real value will be great info on how to be a better defender

By Fahmida Rashid

Feb 13, 2017 4 mins

CyberattacksCybercrimeHacking

View all

OpenAI’s cyber defense letter gets the diagnosis right and the prescription wrong

Your AI agents are isolated. Your infrastructure isn't

Hundreds of OpenAI agents attack RubyGems platform

Anthropic finds evidence of a fourth AI escaping from containment

Snowflake attacker pleads guilty to hack of 165 companies’ data

GitHub's public APIs are becoming an enterprise reconnaissance tool

Microsoft identifies seven new ways AI agents can be hacked

AntV data visualization tool the latest to be hit by ongoing npm supply chain attacks

Mistral AI SDK, TanStack Router hit in npm software supply chain attack

Articles

SAP npm package attack highlights risks in developer tools and CI/CD pipelines

Anthropic employee error exposes Claude Code source

OpenAI admits data breach after analytics partner hit by phishing attack

NPM attacks and the security of software supply chains

GitHub suffers a cascading supply chain attack compromising CI/CD secrets

Thousands of open source projects at risk from hack of GitHub Actions tool

Large language models hallucinating non-existent developer packages could fuel supply chain attacks

How likely can terrorists, nuclear attacks, or hackers take down the cloud?

Winter is coming. Protect your content kingdom

McAfee: Wave of Shamoon cyberattacks coordinated by a single group

Microsoft's president wants a Geneva Convention for cyberwar

RSA Conference preview: The agenda can't keep up

Resources

How AI and Data Observability Are Transforming Manufacturing

Architect your Agentic Enterprise with the Power of Google Cloud and Salesforce

Unlock Scalable, Enterprise-Grade AI Agents for Business Growth