New attack waves from the 'PhantomRaven' supply-chain campaign are hitting the npm registry, with dozens of malicious packages that exfiltrate sensitive data from JavaScript developers.

Google report: AI is accelerating cloud cyberattacks, and one weak link stands out ...

Scientists are tracking unseasonably large sargassum mats in the Atlantic. Where it will land, if at all, depends on winds and currents.

Every developer should be paying attention to the local-first architecture movement and what it means for JavaScript. Here’s ...

Your weekly cybersecurity roundup covering the latest threats, exploits, vulnerabilities, and security news you need to know.

The Contagious Interview campaign weaponizes job recruitment to target developers. Threat actors pose as recruiters from crypto and AI companies and deliver backdoors such as OtterCookie and ...

Mozilla is now working with Anthropic's Frontier Red Team to identify and patch potentially dangerous security vulnerabilities in Firefox. According to Mozilla, the AI company approached ...