The Bitwarden security team confirms that a malicious version of the command-line client was briefly distributed.

Fake packages aim to steal data, credentials, and secrets, and to infect every package created using them, in what could be ...

Codex’s latest update adds computer control, browser support, plugins, and memory. Here are five key features to know about ...

From TCS’s growing AI revenue to OpenAI’s new cyber model and Allbirds’ improbable pivot, this week’s developments showed how ...

Bitwarden CLI 2026.4.0 was compromised in a supply chain attack that targets crypto wallet keys, SSH keys, and CI/CD secrets.

Attackers published a malicious command-line version of the popular open-source password manager to the npm registry and may ...

The Bitwarden CLI was briefly compromised after attackers uploaded a malicious @bitwarden/cli package to npm containing a credential-stealing payload capable of spreading to other projects.

ThreatsDay Bulletin: active exploits, supply chain attacks, AI abuse, and stealth data risks observed this week.

After exclusively sharing details with 9to5Mac last September on ModStealer, a cross-platform infostealer invisible to every major antivirus engine ...

Self-propagating npm worm steals tokens via postinstall hooks, impacting six packages and expanding supply chain attacks.

Hermes Agent from Nous Research targets a different class of AI agent than OpenClaw. This analysis explains what Hermes Agent ...