New attack waves from the 'PhantomRaven' supply-chain campaign are hitting the npm registry, with dozens of malicious packages that exfiltrate sensitive data from JavaScript developers.

Malicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack.

Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...

Success now depends on achieving the right balance between automation and human expertise—maintaining governance without sacrificing agility and ensuring security at scale. As data ecosystems stretch ...

Alation Inc., the agentic knowledge layer that drives outcomes, is introducing outcome-based governance, a new approach to data governance that replaces manual, process-driven programs with an ...