Supply chain attacks feel like they're becoming more and more common.

JFrog reports Telnyx PyPI package was poisoned with malware by TeamPCP Malicious update delivered hidden .wav payload that ...

A cyber attack hit LiteLLM, an open-source library used in many AI systems, carrying malicious code that stole credentials ...

The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute ...

Cybersecurity and tech firms are positioning themselves to capture the exploding market for AI “governance.” Why leading ...

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

FOLIO released a number of new tools designed to help organizations adopt and use shared terminology for legal matters. The ...

Free cryptographically verified code quality scoring for software procurement. The best software wins. Not the best ...

During a recent penetration test, we came across an AI-powered desktop application that acted as a bridge between Claude ...

Uploads bring prompts and responses, but not project files, attachments, or AI-generated images. The rollout skips the UK, ...

Working as a software development engineer for AWS Security at Amazon, Praveen Ravula, the 2025 Developer of the Year awardee ...

Chainguard is racing to fix trust in AI-built software - here's how ...