ESET researchers have discovered malware that taps into OpenAI’s large language model to assist in ransomware attacks.

With attacks on popular repositories on the rise, PyPI has moved to head off a common technique for duping developers. Here’s what it accomplishes — and where there’s room for improvement.

Software Supply Chain Security, Threat Intelligence, and Threat Analysis Solutions

A campaign against top maintainers implanted malware in open source packages with more than 2 billion monthly downloads. The target: crypto wallets.

The new procurement tool seeks to strengthen third-party software risk management (TPSRM). But the process is manual and cumbersome.

CSA’s AI Controls Matrix can help development and AppSec teams distill priorities for securing the AI software supply chain.

The new guidance would raise the bar for software vendors, who will need to ensure the SBOM's they generate are more detailed and machine readable.

While security defenders welcomed the new vulnerability-validation tool, others stress it can be just as useful for would-be attackers.

Here's what you need to know about the discovery of the first self-replicating npm worm, which compromised packages with cloud token-stealing malware.

With its new security platform, Arcjet is betting that the future of application protection lives in code, not at the network edge.

Built-in security can play a role — and fits with the Secure by Design concept — but robust security controls remain essential to managing risk.