Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

2 headlines in this view

Refine the feed

Search across headline titles and summaries.

Volume over time

Weekly headline count for the current query.

Showing 2 most recent headlines Filtered view

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This analysis breaks down the attack chain, payload delivery, and recommended defenses. The post Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery appeared first on Microsoft Security Blog.

More from Microsoft Security Research 16 Jul 2026, 1:36 p.m. Incident · 2 stories Compromise Malware Microsoft Node.js Supply Chain Threat Actor

The popular HTTP client known as Axios has suffered a supply chain attack after two newly published versions of the npm package introduced a malicious dependency that delivers a trojan capable of targeting Windows, macOS, and Linux systems

More from The Hacker News 31 Mar 2026, 7:08 p.m. Compromise Credentials Cryptocurrency Linux macOS Malware Microsoft Node.js Remote Access Trojan Supply Chain Trojan