AI Is Breaking Open Source Supply Chain Security
Mike Sullivan2 hours ago
Supply Chain Attacks
5 stories tagged Supply Chain Attacks.
AI. Mike Sullivan2 hours ago
AI Is Breaking Open Source Supply Chain Security
Ismail Pelaseyed of Superagent explains how AI has compressed attack timelines and why the open source ecosystem may be approaching a structural breaking point.
Gemini CLI's CVSS 10.0 Bug and AI Agent Security
Yuki Okonkwo1 month ago
AI. Yuki Okonkwo1 month ago
Gemini CLI's CVSS 10.0 Bug and AI Agent Security
A CVSS 10.0 flaw in Gemini CLI exposed CI/CD pipelines to full compromise via malicious pull requests. Here's what happened and what it reveals.
The Security Hole We Keep Ignoring: Third-Party Scripts
Bob Reynolds3 months ago
AI. Bob Reynolds3 months ago
The Security Hole We Keep Ignoring: Third-Party Scripts
After 50 years covering tech, I've seen this pattern before: developers linking to code they don't control, creating vulnerabilities that shouldn't exist.
Malware Now Uses Blockchain for Command and Control
Samira Barnes3 months ago
AI. Samira Barnes3 months ago
Malware Now Uses Blockchain for Command and Control
Sophisticated malware campaign uses invisible Unicode characters and Solana blockchain transactions to evade detection and communicate with attackers.
Why Hackers Are Ditching Stolen Passwords for Apps
Marcus Chen-Ramirez4 months ago
AI. Marcus Chen-Ramirez4 months ago
Why Hackers Are Ditching Stolen Passwords for Apps
Public-facing app exploits surged 44% while credential theft dropped. IBM's new threat report reveals what's driving the shift—and why it matters.