CISA issues recommendations to federal agencies on open-source software security
The Cybersecurity and Infrastructure Security Agency published a guidebook for federal agencies Thursday to aid
A little-known npm package was North Korea’s warm-up act for the axios hack
Amazon’s security researchers say a hacking group tied to North Korea targeted small, little-noticed software
Huntress warns about attack spree that hit 30 SonicWall customers in 2 days
Huntress researchers spotted an active and ongoing series of attacks targeting SonicWall VPN and firewall
Google’s solution to hacker name confusion? Yet another naming system
If you are a CISO, here is a new problem for the pile: Do I
ANCHOR-CI could fix 20 years of broken government-industry collaboration
On July 1, the Cybersecurity and Infrastructure Security Agency (CISA) published a seven-page notice in
Malware is targeting AI tools in software development environments
Malware targeting AI coding assistants and software developers’ automated workflows is spreading into more environments
OpenAI says model test was behind Hugging Face hack
A cyberattack that poisoned the data pipeline of a major AI code platform was carried
Where’s the Trump administration line on AI regulation?
After a year and a half spent downplaying calls for AI safety regulations, the Trump
Russian trio indicted for allegedly running bulletproof hosting providers that spurred cybercrime
Three Russian nationals and a pair of bulletproof hosting providers directly supported a series of
SonicWall customers under threat as attackers exploit 2 zero-days
SonicWall customers are attempting to dodge another security challenge as attackers are exploiting a pair