Perplexity launches Bumblebee: How its new read-only dev scanner differs from Chainguard

Perplexity launches Bumblebee: How its new read-only dev scanner differs from Chainguard ...
Microsoft

Typosquatted npm packages used to steal cloud and CI/CD secrets

Microsoft has identified an active supply chain attack targeting the npm package ecosystem. On May 28, 2026, a single threat actor operating under the newly created maintainer alias vpmdhaj (a39155771 ...

「Prompt API」が安定版に、超効率モデル「Gemma 197M」も ～「Google Chrome ...

先日開催された「Google I/O 2026」では多くの製品でAIを活用した新機能や改善がアナウンスされたが、「Google Chrome」もその例外ではない。とくに注目したいのが、Webブラウザー組み込みのAI（Built-in ...
Microsoft

Malicious npm packages abuse dependency confusion to profile developer environments

A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and ...

118-Point SEO Playbook Targets Electrician Lead Broker Dependency

How a 118-Point Local SEO Playbook Helps Electricians Cut Out Lead Brokers and Own Their Market Lake Elsinore, United ...

All You Need To Know About Cloudflare’s Agent Readiness Score

The Cloudflare Agent Readiness Score is a real shift. The composite number is also the wrong thing to optimize for. Here's ...
Tech Times

npm Supply Chain Attacks Hit GitHub: 2FA Approval Gate Now Blocks Stolen CI Tokens

GitHub’s internal repositories — now staged publishing in npm 11.15.0 requires a human 2FA approval before any package goes ...