Amazon linked multiple high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ...

A critical unauthenticated remote code execution flaw in Oracle PeopleSoft let the ShinyHunters extortion group breach more than 100 organizations before Oracle ...

The Pentagon announced on Thursday a nearly $7 billion, up-to-10-year agreement with Oracle ​to consolidate the department's ...

Six malicious npm packages mimicking Rollup polyfill tools stole developer credentials and enabled remote access in a Lazarus-linked campaign. The attack uses a layered delivery chain designed to ...

Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup polyfill tooling to facilitate remote access and data theft. According to ...

Oracle's stock fell 19% this week, the steepest drop since August 2001, the depths of the dot-com bust. The company's capital expenditures surged 162% in the latest fiscal year, with almost $24 ...

The Swift Package Index is no longer independent as Apple has taken control, but it will remain an open source search engine for third-party code. The Swift Package Index gave developers one trusted ...

Jon Gilbert is a Features Writer for Android Police. I've covered Android since 2021, focusing on writing features and guides about Android apps and features that directly affect users. I've attended ...

The ShinyHunters extortion crew exploited an unpatched flaw in Oracle PeopleSoft to break into enterprise systems, steal data, and demand payment to keep it private. The campaign hit universities ...

Apple is opening App Store subscription bundles to developers from different companies, giving independent app makers a new way to package services together and sell them at a combined price. The ...

With Monday's keynote behind them, Apple developers at WWDC 2026 shifted into the hands-on phase Tuesday as Craig Federighi, the company's senior vice president of software engineering, fielded ...

Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI ...