JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

Kaspersky says the attacks use phishing, GitHub-hosted payloads, CVE-2025-9491 LNK abuse, and Go2Tunnel-based tunneling.

Attackers exploited Langflow vulnerability CVE-2025-3248 to conduct an agentic AI-powered ransomware attack involving reconnaissance, credential theft, and lateral movement.

They're not bad; they're just prompted that way. Sysdig threat hunters documented what they say is the first-ever documented ...

MotherDuck is launching Flights, an agent-native data pipeline that enables users to choose the MCP server and AI agent of their choice to build and deploy data pipelines in minutes using a flexible, ...

Modern business intelligence demands speed, and utilizing AI tools for Excel is the ultimate way to hyper-charge your data workflows this year.

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...

The TikTok creator’s $39 billion data center is the latest payoff from Lula’s courtship of Chinese investment.

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

Nasdaq will distribute its proprietary TotalView market data through Pyth, making the network one of the first onchain ...

It contains more than half a million people’s genomes, paired with clinical records and wearable tech data. That gives ...

Part of the SD Times 100 2026 series. See the full SD Times 100 2026 list for every category and honoree. Every conversation ...