Threat actors are evading phishing detection in campaigns targeting Microsoft accounts by abusing the no-code app-building platform Bubble to generate and host malicious web apps.

GitHub is adding AI-powered security detections to its Code Security offering, aiming to catch more vulnerabilities across a ...

チェコのJetBrainsは3月19日（現地時間）、統合開発環境「IntelliJ IDEA」でJavaScriptおよびTypeScriptの中核機能を無償化すると発表した。これまで「Ultimate」サブスクリプションだけに含まれていたJavaScript、TypeScript、HTML、CSSの機能を「IntelliJ IDEA 2026.1」より無料で提供する。

DarkSword exploit targets iOS 18.4–18.7 using 6 flaws and 3 zero-days, enabling rapid data theft from iPhones across multiple countries.

AI-assisted code speeds development, but introduces vulnerabilities at an alarming rate. Waratek IAST reports flaws ...

Magecart hides payload in favicon EXIF via third-party scripts, bypassing static analysis and stealing checkout data at runtime.

The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...