Supply chain attacks feel like they're becoming more and more common.

The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed ...

A former employee with the so-called Department of Government Efficiency allegedly claimed he tapped into two sensitive Social Security Administration databases and intended to share the information ...

Supabase, a popular developer database platform, has been blocked in India — one of its key markets — TechCrunch has learned. New Delhi ordered internet providers to block its website, resulting in ...

ProPublica is a nonprofit newsroom that investigates abuses of power. Sign up to receive our biggest stories as soon as they’re published. These highlights were written by the reporters and editors ...

The Trump administration’s move to give deportation officials access to Medicaid data is putting hospitals and states in a bind as they weigh whether to alert immigrant patients that their personal ...

In January 2026, Microsoft Defender Experts identified a new evolution in the ongoing ClickFix campaign. This updated tactic deliberately crashes victims’ browsers and then attempts to lure users into ...

Cybersecurity researchers have discovered two malicious packages in the Python Package Index (PyPI) repository that masquerade as spellcheckers but contain functionality to deliver a remote access ...

For much of the last year, staffers who were initially part of the Department of Government Efficiency effort improperly accessed and shared sensitive personal data on millions of Americans. The Trump ...