software supply chain
The malware "weaponized AI CLI tools (including Claude, Gemini, and q) to aid in reconnaissance and data exfiltration"
AWS has now "included additional protections against memory dumps within container builds..."
Google's new open source platform will shield popular dependencies with automations and data visibility tools.
Where are CISOs focusing and what makes a good one?
"These emails implored OpenJS to take action to update one of its popular JavaScript projects to ‘address any critical vulnerabilities'"
Poisoned Easter eggs for all: Apparent supply chain attack caught mercifully early…
"Package managers are at a critical point in the open source ecosystem and have the capability to scale security improvements across open source ecosystems"
SolarWinds’ poor controls... false and misleading statements and omissions, and the other misconduct... would have violated the federal securities laws even if SolarWinds had not experienced a major, targeted cybersecurity attack"