Threat actors have successfully weaponized Zapier’s compromised NPM account to unleash a digital weapon that’s creating chaos across the entire open-source ecosystem. This isn’t your typical data ...
The Securities and Exchange Commission’s (SEC) case against SolarWinds and its chief information security officer (CISO), Timothy Brown, ended abruptly on November 20, 2025, when the SEC agreed to ...
The U.S. Securities and Exchange Commission (SEC) has abandoned its lawsuit against SolarWinds and its chief information security officer, alleging that the company had misled investors about the ...
The Securities and Exchange Commission on Thursday said it will dismiss a lawsuit against SolarWinds that had accused the company of making fraudulent statements that misled investors about its ...
Make sure not to miss this valuable item your first time around. When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works. Add us as a preferred source on ...
Amazon researchers discovered more than 150,000 malicious packages in the NPM registry, in what they called "a defining moment in supply chain security." The packages were part of a token farming ...
Researchers have discovered a supply chain risk in a popular installer authoring tool, which they've described as potentially leading to cyberattacks "comparable in scope to supply chain incidents ...
An ongoing npm credential harvesting campaign operating since August 2025 has been discovered by researchers at Koi Security. The malware, dubbed PhantomRaven by the researchers, is actively stealing ...
Through the AWS Workload Migration program, SolarWinds will supercharge its efforts to help customers streamline cloud management and observability practices. AUSTIN, Texas--(BUSINESS ...
SolarWinds this week announced its AI Agent and additional AI capabilities across its portfolio that are aimed at helping enterprise organizations to move from a reactive mode of IT operations to a ...
At least 187 code packages made available through the JavaScript repository NPM have been infected with a self-replicating worm that steals credentials from developers and publishes those secrets on ...
A phishing email was at the heart of the attack. NPM team quickly removed backdoored versions. 18 packages hit, with 2B+ downloads every week. A new digital supply chain attack has targeted popular ...