SecurityBrief UK - Technology news for CISOs & cybersecurity decision-makers
United Kingdom

Javascript Stories

UK Stories

Javascript stories

Global Stories

Javascript stories

MongoDB adds AI tools for production agents in Atlas
DevOps

MongoDB adds AI tools for production agents in Atlas

Enterprises running AI agents can now cut infrastructure overhead, as MongoDB adds automated embeddings, memory and faster database performance.

By Mark Tarre • 4 min read • This month
KnowBe4 partners Secure Code Warrior on AI training
Data Protection

KnowBe4 partners Secure Code Warrior on AI training

Organisations using AI in software development will get training on secure coding and governance as vulnerabilities and data risks mount.

By Mark Tarre • 4 min read • This month
Cloudflare warns of AI code review prompt injection
Virtual Private Networks

Cloudflare warns of AI code review prompt injection

Detection of malicious code can collapse when AI reviewers are fed large files packed with harmless text, Cloudflare's research shows.

By Sean Mitchell • 5 min read • This month
Claude Code can leak secrets in public npm packages
Data Protection

Claude Code can leak secrets in public npm packages

Hundreds of packages could have exposed API keys and logins after Claude Code saved approved commands in a file npm may publish by default.

By Shannon Williams • 4 min read • Last month
PHP firms face tougher hunt for skilled developers
Virtualisation

PHP firms face tougher hunt for skilled developers

A shortage of experienced coders is putting pressure on teams maintaining mission-critical web systems as most PHP users plan upgrades.

By Kaleah Salmon • 4 min read • Last month
Google links axios attack to suspected North Korean actor
DevOps

Google links axios attack to suspected North Korean actor

Broad exposure across thousands of applications is feared after Google tied the axios npm supply chain attack to suspected North Korean hackers.

By Mark Tarre • 3 min read • Last month
Google AI Studio gets full-stack coding agent Antigravity
Marketing Technologies

Google AI Studio gets full-stack coding agent Antigravity

Google has launched Antigravity, a full-stack coding agent in AI Studio that turns text prompts into collaborative, production-ready web apps.

By Mark Tarre • 3 min read • Mon, 23rd Mar 2026
Fake Windsurf extension uses Solana to steal dev data
Blockchain

Fake Windsurf extension uses Solana to steal dev data

Malicious fake Windsurf IDE extension hid JavaScript, abused Solana to fetch payloads, and stole developers' browser credentials and tokens.

By Sean Mitchell • 3 min read • Thu, 19th Mar 2026
LeakNet adopts ClickFix lures & Deno fileless loader
Storage

LeakNet adopts ClickFix lures & Deno fileless loader

Ransomware group LeakNet adopts ClickFix lures and a Deno-based fileless loader to scale attacks and evade traditional endpoint defences.

By Sofiah Nichole Salivio • 5 min read • Thu, 19th Mar 2026
Okta helps disrupt ShieldGuard crypto-stealing extension
Multi-factor authentication

Okta helps disrupt ShieldGuard crypto-stealing extension

Okta and partners pull rogue ShieldGuard Chrome extension that stole crypto wallet data and bypassed browser defences via custom code.

By Sofiah Nichole Salivio • 4 min read • Wed, 18th Mar 2026
Chainguard extends secure libraries to Python, Java, JS
Application Security

Chainguard extends secure libraries to Python, Java, JS

Chainguard expands its rebuilt-from-source Libraries to Python, Java and JavaScript, targeting malware risks in AI-driven software supply chains.

By Shannon Williams • 4 min read • Fri, 27th Feb 2026
Meta donates React to new Linux Foundation-backed body
Hyperscale

Meta donates React to new Linux Foundation-backed body

Meta hands React and React Native to a new Linux Foundation-backed React Foundation, promising neutral, community-led governance.

By Sofiah Nichole Salivio • 5 min read • Fri, 27th Feb 2026
ActiveState unveils 79m-strong secure open source catalogue
DevOps

ActiveState unveils 79m-strong secure open source catalogue

ActiveState launches a 79m-component secure open source catalogue to centralise software supply chains and cut enterprise vulnerability risk.

By Kaleah Salmon • 4 min read • Fri, 20th Feb 2026
Developers' AI agents pose rising software supply risks
Data Protection

Developers' AI agents pose rising software supply risks

Developers granting AI agents broad, unsupervised access to code and systems are creating new software supply chain and data exposure risks.

By Kaleah Salmon • 4 min read • Fri, 6th Feb 2026
OpenSilver 3.3 brings native Blazor into XAML apps
Open source

OpenSilver 3.3 brings native Blazor into XAML apps

OpenSilver 3.3 lets developers embed native Blazor components in XAML apps, uniting WPF-style UI with the Blazor ecosystem.

By Catherine Knowles • 3 min read • Fri, 30th Jan 2026
Cloudflare buys Astro framework, pledges open future
Edge Computing

Cloudflare buys Astro framework, pledges open future

Cloudflare snaps up the Astro web framework, vowing to keep it open source while tying it closer to its performance and developer platform.

By Mark Tarre • 3 min read • Tue, 20th Jan 2026

Stories from Other Regions

Javascript stories

MODLR launches visual scripting for no-code data flows
Storage

MODLR launches visual scripting for no-code data flows

MODLR has added a Visual Scripting Engine to its CPM platform, letting finance and operations teams build no-code data workflows.

By Sofiah Nichole Salivio • 4 min read • Wed, 11th Feb 2026