GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and au [...]

Trump's federal Bitcoin reserve order leaves the crypto market unenthused

With US stocks unstable, consumer confidence in the economy plunging and whispers of a potential recession growing less muted, the economy under President Donald Trump's second term has been abou [...]

Running Claude Code or Claude in Chrome? Here's the audit matrix for every blind spot your security stack misses

Between May 6 and 7, four security research teams published findings about Anthropic’s Claude that most outlets covered as three separate stories. One involved a water utility in Mexico, another tar [...]

Valid certificates, stolen accounts: how attackers broke npm's last trust signal

On May 19, 633 malicious npm package versions passed Sigstore provenance verification. They were cleared by the system because the attacker had generated valid signing certificates from a compromised [...]

Coinbase says Trump’s SEC has ended its enforcement case against the crypto company

Coinbase says that the SEC has agreed to end an enforcement case that accused it of illegally running an unregistered securities exchange. This could signal a major change in how the US government wil [...]

Facebook, Instagram and Threads will start testing Community Notes on March 18

Meta will start testing its Community Notes model, with which it's replacing human fact checkers, on Facebook, Instagram and Threads in the US on March 18. Notes won't appear publicly on pos [...]

The SEC is dropping an investigation into Robinhood

In another sign that the Trump administration will be friendlier toward the cryptocurrency industry, the Securities and Exchange Commission is dropping an investigation into Robinhood. The agency has [...]

10 Best Chrome Extensions That Are Perfect for Everyone

Are you a great Chrome user? That’s nice to hear. But first, consider whether or not there are any essential Chrome extensions you are currently missing from your browsing life, so here we're g [...]

One command turns any open-source repo into an AI agent backdoor. OpenClaw proved no supply-chain scanner has a detection category for it

Just two months ago, researchers at the Data Intelligence Lab at the University of Hong Kong introduced CLI-Anything, a new state-of-the-art tool that analyzes any repo’s source code and generates a [...]