The Maritime Transportation Security Act (MTSA) requires plans to protect OT systems, audits by independent third parties, ...

OpenAI's limited release of GPT-5.4-Cyber highlights that frontier AI is slowly changing how enterprises approach ...

Infosecurity outlines key recommendations for CISOs and security teams to implement safeguards for AI-assisted coding ...

A WIRED investigation based on Department of Homeland Security records this week revealed the identities of paramilitary Border Patrol agents who frequently used force against civilians during ...

Attackers stole a long-lived npm access token belonging to the lead maintainer of axios, the most popular HTTP client library in JavaScript, and used it to publish two poisoned versions that install a ...

Anthropic just cannot keep a lid on its business. After details of a yet-to-be-announced model were revealed due to the company leaving unpublished drafts of documents and blog posts in a publicly ...

AI is changing how software is built at a pace the industry never imagined. According to Jason Schmitt, CEO of Black Duck, this is creating a security challenge that traditional approaches can’t keep ...

If you don't have a login or your access has expired, you will need to purchase a subscription to gain access to this article, including all our online content.

A large-scale campaign is targeting developers on GitHub with fake Visual Studio Code (VS Code) security alerts posted in the Discussions section of various projects, to trick users into downloading ...

The hackers compromised GitHub Action tags, then shifted to NPM, Docker Hub, VS Code, and PyPI, and teamed with Lapsus$. The TeamPCP hacking group has expanded its open source software campaign from ...

When the U.K. government launched its Cyber Action Plan recently to complement its Cyber Security and Resilience Bill in aid of galvanizing Britain’s cybersecurity posture, there was one interesting ...

Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible code, a technique that’s flummoxing traditional defenses designed to ...