The 23andMe data breach settlement will pay out $30 million to $50 million in total — Here's how much you could get.

Scammers have been abusing unsecured cellular routers used in industrial settings to blast SMS-based phishing messages in ...

Chrome faces its sixth zero-day attack in 2025 as Google patches critical V8 engine flaw CVE-2025-10585 discovered by Threat ...

A newly-discovered malicious package with layers of obfuscation is disguised as a utility library, with malware essentially ...

GitHub enforces FIDO 2FA and seven-day token limits after Shai-Hulud npm attack to boost supply chain security.

Newly discovered npm package 'fezbox' employs QR codes to hide a second-stage payload to steal cookies from a user's web ...

When a clickjack attack managed to hijack a passkey authentication ceremony, were password managers really to blame? ZDNET's investigation reveals a more complicated answer.

Charles Guillemet says a phishing-led supply-chain breach could have become a systemic disaster for crypto users.

A Dune-inspired worm recently hit CrowdStrike and npm, infecting hundreds of packages. Here's what happened - and how to protect your code.

A new PDF phishing kit is being sold on the dark web, promising customers advanced features, a simple interface, and ...

In response to the recent supply chain attack in the JavaScript package manager npm, GitHub has made a few changes that will ...