April 30, 2026 Threat intel
The Bun runtime is becoming the malware delivery vehicle of 2026
April 30, 2026 Threat intel
How a GitHub Actions comment box became a supply-chain attack: elementary-data on PyPI and GHCR
April 30, 2026 Threat intel
Team PCP: tracking a six-week supply-chain campaign through Trivy, Checkmarx, Bitwarden, and beyond
April 30, 2026 Threat intel
Vercel's April 2026 incident: an OAuth-app supply chain in three hops
April 29, 2026 Analysis
The AI agent as confused deputy: a 2026 attack class
April 29, 2026 Analysis