In a year that will be best remembered for zero-day malware attacks, five members of the hacking—er, security ...

To defend against slopsquatting, proactive trust verification must occur before any dependency lands in a developer's hands.

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

Terms often used in cybersecurity discussions and education, briefly defined. Your corrections, suggestions, and recommendations for additional entries are welcome: email the editor at editor@n2k.com.