Given the incredible power of modern microcontrollers, we’ve seen quite a few attempts to turn them into more general purpose computers over the years. KryonOS from [Haris] is the latest, ...

The NPM ecosystem has suffered another supply chain attack in which a malicious package has accumulated millions of downloads ...

A malicious npm package reached over 2 million weekly downloads by hiding its payload in a routine library function rather than an install script.

Attackers have compromised the GitHub account of the maintainer behind keyv, a popular key-value storage library that pulls in roughly 127 million weekly downloads on npm, and used that access to push ...

Engineering @cloudflare and @voidzerodev. Creator of @OxcProject.

Threat group APT-C-60 has updated its cyberespionage delivery chain by using Proton Drive, malicious Windows shortcut files, and trusted developer platforms to deploy the SpyGlace malware. The ...

A supply chain attack hit Axios when attackers used stolen npm credentials to publish malicious versions containing a phantom dependency. This triggered a cross-platform RAT during installation and ...

Google is finally rolling out Drive’s new local file backup feature for Android devices. We’ve been tracking the feature for months and can tell you exactly how it would work. Android will use Google ...

Strip the types and hotwire the HTML—and triple check your package security while you are at it. JavaScript in 2026 is just getting started. I am loath to inform you that the first month of 2026 has ...

João has been covering the tech world for over 7 years, with a heavy focus on laptops and the Windows ecosystem. I also love all things tech and videogames, especially Nintendo, which he's always ...

Google has officially released Chrome 144 to the stable channel for Windows, Mac, and Linux, addressing 10 security vulnerabilities with a primary focus on the V8 JavaScript engine. The rollout is ...