OpenSSF Notes Quarter of Growth with New Members, Added AI Security Resources, and Growing Community
The Open Source Security Foundation (OpenSSF), a cross-industry initiative of the Linux Foundation focused on sustainably ...
The OWASP-backed tool scans JavaScript and TypeScript lockfiles locally, aiming to help developers catch and remediate dependency risks before CI failures. As AI coding assistants accelerate software ...
On May 11, the same day Google's Threat Intelligence Group disclosed the first confirmed case of attackers using AI to build ...
A GitHub employee installed a routine VS Code extension update, handed cybercrime group TeamPCP enough access to exfiltrate ...
Popular JavaScript modules including size-sensor and echarts-for-react hit as hijacked account closed GitHub warnings ...
Google identified the first malicious AI use for a zero-day 2FA bypass in an open-source admin tool, accelerating threat ...
Google says attackers are using AI for zero-day research, malware development, reconnaissance, and access to premium AI tools ...
Another massive supply chain attack is spreading. Hundreds of compromised NPM packages are being detected, with hackers using stolen secrets to create over 2,200 public GitHub repositories, all ...
Network security certifications such as CISSP, CEH, CCSP, and OSCP are becoming essential in 2026 as organizations strengthen cybersecurity defenses against AI-powered threats, ransomware, and cloud ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results