Here’s what you need to know about AI agents’ impact on software supply chain security — and what you can do to fight back. 

AI coding is the new reality — and it will further destabilize software supply chain security. So step up your AppSec.

In this latest incident, threat actors target developers with a bogus package — a shift away from cryptocurrency development targets.

RL researchers discovered two NuGet packages containing scripts that form a complete toolchain for typosquatting. Here's how it worked.

ESET has revealed PromptSpy, the first malware to use Gemini AI for persistence. Read the article and see our sources: https://s.vp.net/VQG8rESET researchers...

AI-generated code is a game changer — requiring embedded, AI-driven application security. Here’s why you need to fight fire with fire.

Volete mantenere la vostra privacy mentre utilizzate Bitcoin? Ecco una delle cose che dovreste considerare di fare...#bitcoin #selfcustody #cybersecurity #pr...

The tool is a step forward for managing AI coding risk — but it trips on modern supply chain threats because it looks only at source code.

The OpenClaw saga is a case study on the AI threat, demonstrating how it increases supply chain risk.

OWASP has adopted a new container security analyzer to slow information overload from tools. Here’s what you need to know.

Package URLs give software components an exact address to improve vulnerability matching, which reduces alert fatigue and simplifies compliance.

To demonstrate Spectra Analyze’s capabilities, here's how to assess a sample in your environment — and create a YARA rule.

AI agents create novel attack surfaces and control issues that require rethinking basic assumptions — and AppSec tooling.

Here’s what to know about the Ethereum Foundation’s post-quantum security effort — and why you need to modernize your SecOps.

Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.