Trusted developer tools are becoming the new path into enterprise software environments.

Every enterprise running AI coding agents has just lost a layer of defense. On March 31, Anthropic accidentally shipped a 59.8 MB source map file inside version 2.1. ...

The new “agentjacking” attack takes almost no real hacking ability to pull off. It's predicated on pulling a public ...

When OpenAI engineers discovered that a poisoned update to a widely used JavaScript library had executed on two corporate laptops, the company’s security team faced a decision that no software ...

Microsoft GitHub hack hit open-source AI tools, exposing developer passwords and cloud credentials. Here’s why SA tech teams should care.

A new supply chain vulnerability pattern could be quietly affecting hundreds of open source projects, according to research from Israeli AI security start-up Novee Security.The firm has dubbed the ...

Cybersecurity vendor Trellix published a terse statement last Friday, disclosing that a threat actor recently gained unauthorized access to "a portion of our source code repository." Trellix did not ...

A leading US cybersecurity vendor has been breached by threat actors who managed to access its source code, it has been revealed. Privately held firm Trellix disclosed the incident on May 4, claiming ...

A Distributed Denial of Service (DDoS) attack recently targeted BridgeMind’s API, flooding it with millions of requests and disrupting services. To mitigate the issue, the team relied on Claude Code, ...

Microsoft’s GitHub has suffered what appears to be its biggest ever security breach after confirming that attackers exfiltrated code from around 3,800 of the company’s internal repositories. News of ...

Cybersecurity firm Trellix disclosed a data breach after attackers gained access to "a portion" of its source code repository. Trellix is a global cybersecurity company formed from the October 2021 ...

Privately-held, extended detection and response firm Trellix disclosed over the weekend that hackers found their way to its source-code repository. See Also: Know Thy Enemy: Threats to Cyber ...