The Bitwarden CLI NPM package compromise is tied to a Checkmarx supply chain attack and references the Shai-Hulud worm.

Bitwarden CLI 2026.4.0 was compromised via GitHub Actions in Checkmarx campaign, exposing secrets and distributing malicious ...

The compromise of a version of Bitwarden's CLI is connected to the ongoing Checkmarx supply chain campaign, but differences in the operational methods of both incidents are making it difficult to ...

You would think AI could create secure, random, and strong passwords, but that's not actually true. In many cases, ...

A relatively new ransomware family is using a novel approach to hype the strength of the encryption used to scramble ...

VPNs, Virtual Private Networks, aren’t just a good idea to keep your data secure: for millions of people living under ...

Before RSA, secure communication required sharing secret keys, an impossible task at global scale. This is the story of how a ...

Hackers are targeting sensitive information stored in the LiteLLM open-source large-language model (LLM) gateway by ...

This week’s ThreatsDay covers supply chain attacks, fake help desks, wiper malware, AI prompt traps, RMM abuse, phishing kits ...

Connecting an LLM to your proprietary data via RAG is a massive liability; without document-level access controls, your AI is ...

How often does one see people dressed in spacesuits performing stringed instruments? At Vienna Summer Strings Camp, that’s exactly what happened. Hundreds of musicians, beginners to advanced, are ...

I review privacy tools like hardware security keys, password managers, private messaging apps, and ad-blocking software. I also report on online scams and offer advice to families and individuals ...