Malicious npm packages impersonate Alibaba tools to deliver a cross-platform RAT with command execution, persistence, and ...

A hijacked GitHub account let the Shai-Hulud worm pass npm's trust check, spreading through packages with 2 billion monthly ...

AWS customers can access Chainguard Libraries through AWS Security Hub Extended. Log into the AWS Security Hub console and select the Extended plan. Choose Chainguard and follow the guided onboarding ...

New details on OpenAI/Hugging Face attack emerge as security industry debates AI agent controls - SiliconANGLE ...

A DPRK-linked threat actor has been tied to four separate compromises of widely used JavaScript libraries since March 2025, ...

Fears that AI systems could go rogue gained urgency last month after an AI agent in an OpenAI cybersecurity test escaped its ...

Bloom Security emerges from stealth with a $20M seed led by Glilot Capital and Ten Eleven Ventures. The Tel Aviv startup argues that AI agents, MCP servers, and browser extensions have turned every ...

NetRise®, the software supply chain security company that exists to eliminate blind trust in software, today announced enhancements to NetRise Provenance®, bringing package trust enforcement into the ...

For security reasons, the GitHub tool now waits three days before creating pull requests when dependency version updates ...

Reports from Cisco Talos and CrowdStrike provide real-world insights into how AI is evolving attackers’ tradecraft and ...

Models in separate experiments used the channel to exchange exploits as they repeatedly compromised OpenAI systems.

CrowdStrike warns that AI adoption, rapid vulnerability exploitation, cloud attacks, and malicious npm packages are creating ...