If users are stuck waiting, they don't care which service is slow. Frontend observability helps you see — and fix — what they experience.

New findings connect the same Pyongyang-backed group to four compromises dating to 2025, revealing a larger operation than ...

Amazon threat researchers found one threat actor behind four distinct open source compromises, including the March 2026 ...

A DPRK-linked threat actor has been tied to four separate compromises of widely used JavaScript libraries since March 2025, ...

Cisco Talos has detailed msaRAT, a Rust-based RAT used by the Chaos ransomware crew that drives a headless Chrome or Edge ...

The cloud computing giant said in a blog post on July 29 that compromises of the axios, debug, chalk and typo-crypto libraries were carried out by the same group, known as Saphire Sleet, BlueNoroff ...

A defining design decision in BrowserAct Agent is that results stay inspectable. Extracted records keep their source page ...

Chaos ransomware attackers use the new msaRAT backdoor to hide encrypted command traffic through Chrome and Edge.

Spread the loveYou’ve poured your heart and soul into a website, meticulously crafting every pixel in Dreamweaver. It looks ...

The malicious dependency used an npm “postinstall” command, which automatically runs code when a package is installed. Its obfuscated downloader identified the victim’s operating system and deployed a ...

Spread the loveChoosing the right code editor is a bit like a chef selecting their knives: it’s a deeply personal decision ...

Amazon Threat Intelligence has tied a DPRK hacking group to four separate NPM package supply chain attacks, including axios. The company’s security teams have connected the axios, debug, chalk, and ...