The company said a threat actor accessed and snooped around its account for months, then stole OAuth tokens for Drift integrations from its cloud environment.

Congress and federal agencies can take some simple steps to better protect open-source software.

Socket researchers said the malware-ridden packages were collectively downloaded over 330 times. GitHub removed all of the malicious packages Wednesday.

The credentials are likely for future phishing and spam campaigns, Sysdig researchers said.

The “severe” flaw could allow attackers full access to instances.

Researchers discovered a new ransomware gang that appears to be in the early stages of their extortion campaigns.

Sanctions against the cryptocurrency mixer have ignited concern from industry stakeholders, privacy advocates and legal experts.

The meeting will combine tech leaders with feds.

79% of websites use PHP, according to one estimate.

As debate over security research ethics rages on, so, too, do the compromises of organizations running vulnerable Exchange Server software.