First 2026 cyber recap covering IoT exploits, wallet breaches, malicious extensions, phishing, malware, and early AI abuse.

A new Shai-Hulud npm strain and a fake Jackson Maven package show how attackers abuse trusted dependencies to steal secrets ...

A maximum severity vulnerability, dubbed 'React2Shell', in the React Server Components (RSC) 'Flight' protocol allows remote code execution without authentication in React and Next.js applications.

Critical vulnerability in React library should be treated by IT as they did Log4j - as an emergency, warns one expert. Developers using the React 19 library for building application interfaces are ...

A new worm is infecting NPM packages en masse and stealing credentials. The code of the malware contains the identifier “SHA1HULUD,” which is why security analysts are calling it “Shai-Hulud 2.0.” ...

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

Community driven content discussing all aspects of software development from DevOps to design patterns. If a developer finds out that there are new, updated files on a remote repository like GitHub, ...

This weekend, the rewards app Fetch is debuting its very first Super Bowl ad, which includes a live giveaway of $1.2 million. Super Bowl spots cost roughly $8 million now – what’s one more mil, right?

Dog-like robots could one day learn to play fetch, thanks to a blend of artificial intelligence (AI) and computer vision helping them zero in on objects. In a new study published Oct.10 in the journal ...

Fetch offers an accident and illness plan with extensive coverage, including virtual vet visits. Many, or all, of the products featured on this page are from our advertising partners who compensate us ...