Researchers at the AI Now Institute developed a proof-of-concept exploit showing common AI tools used for security could ...

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

To defend against slopsquatting, proactive trust verification must occur before any dependency lands in a developer's hands.

The Swift Package Index is no longer independent as Apple has taken control, but it will remain an open source search engine for third-party code. The Swift Package Index gave developers one trusted ...

New activity targets CVE‑2026‑20230, an SSRF bug that can allow unauthenticated file writes and potential root‑level access on vulnerable systems. A critical Cisco Unified CM vulnerability is now ...

Community-run Swift package search engine and metadata index Swift Package Index is joining Apple, but says little is changing for developers in the near term. Here are the details. Most Swift ...

In context: Unpatchable, hardware-level vulnerabilities caused a stir some years ago when they repeatedly turned up in AMD and Intel processors, but they've been far rarer on Apple chips. This latest ...

Researchers at Paradigm Shift have published the technical details of usbliter8, a new unpatchable iPhone BootROM vulnerability that enables arbitrary code execution on devices powered by Apple’s A12 ...

Chainguard will use AI to protect open-source code. Athena pools open-source users, developers, and maintainers. Others are also using AI to secure open-source code. As Chainguard puts it, "The gap ...

In response to an arcane but incredibly lucrative exploit discovered by Forza Horizon 6 players, Playground Games has confirmed that those who used the method to accumulate massive amounts of credits ...

Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI ...

As global travel becomes easier, organized crime networks are increasingly exploiting tourism, visa programs, and open-border systems to commit theft, fraud, burglary, and other crimes across multiple ...