Slopsquatting and vibe coding are fueling a new wave of AI-driven cyberattacks, exposing developers to hidden risks through ...

The rise of LLM-powered code generation tools is reshaping how developers write software - and introducing new risks to the software supply chain in the process. These AI coding assistants, like large ...

The National Institute of Standards and Technology’s latest guidance, on how to secure artificial intelligence (AI) ...

As attacks grow more sophisticated, the open-source community is racing to close critical security gaps and stop malicious ...

NHI Governance delivers unified visibility and control over secrets in complex environments, addressing critical security ...

A cyberspy crew or individual with ties to China's Ministry of State Security has infected global organizations with a remote ...

A whistleblower complaint made public this week provides the most in-depth look yet at the Department of Government ...

Posing as potential employers, Slow Pisces hackers conceal malware in coding challenges sent to cryptocurrency developers on ...

The future belongs to those who wield AI’s power responsibly. Let’s build it—one secure line of code at a time.

It’s not a matter of if, but when. Now, let’s dig into a specific open source supply chain attack to help paint the picture of how these attacks work. We want to hear from you! Join us on GitHub ...