Can your robot be hacked? A new vulnerability in Unitree robots could turn them into a botnet army. Are we taking robot security seriously enough?

Here's what you need to know about the discovery of the first self-replicating npm worm, which compromised packages with cloud token-stealing malware.

Learn how to protect yourself from phishing attacks and protect your sats from getting stolen using the appropriate tools

Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.

Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.

In this guide, we’ll cover essential SSH security tips every Linux beginner should know to keep their servers secure, efficient, and running smoothly.

Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.

A malicious Model Context Protocol package was found in the wild last week. Here are lessons from the compromise of the AI interface tool.

With its new security platform, Arcjet is betting that the future of application protection lives in code, not at the network edge.

Attack surface management (ASM) isn’t just another buzzword. It represents a fundamental shift in security strategy with risk on the rise.

Built-in security can play a role — and fits with the Secure by Design concept — but robust security controls remain essential to managing risk.

Today we’re announcing the next major chapter for Apple Security Bounty, featuring the industry’s highest rewards — up to $2 million and a maximum payout in excess of $5 million — expanded research categories, and a flag system for researchers to objectively…

Vibe-coded apps that make it to production can be a minefield for security teams. Here are key takeaways for your AppSec team.

More than half of MCP servers were found to rely on static, long-lived credentials. With AI agents on the rise, that’s a problem.

Use of AI in container workloads is growing — but security is not native. That makes additional controls essential. Here’s what you need to know.

While 2FA and trusted publishing will help, you need tools that give visibility into how packages behave — not just who is publishing.