Cybersecurity researchers have discovered a malicious npm package named "@acitons/artifact" that typosquats the legitimate " ...

Research by Wiz shows that industry titans, with combined valuations exceeding $400 billion, have left the equivalent of ...

Experts say the leaks highlight how fast-growing AI firms may be prioritizing innovation over basic DevSecOps hygiene, ...

The typosquatted “@acitons/artifact” package targeted GitHub’s CI/CD workflows, stealing tokens and publishing malicious ...

Wiz has analyzed GitHub repositories pertaining to the world’s largest AI companies and found that many had leaked verified ...

GitHub has announced AgentHQ, a new addition to its platform that aims to unify the fragmented landscape of AI tools within ...

AI companies have had a pretty rocky history with cybersecurity and data privacy, and new research from Wiz shows this still ...

Amplitude, Inc., a leading digital analytics platform, is collaborating with GitHub to launch an agent-to-agent integration for enterprise product and engineering teams-enabling Amplitude to act as an ...

The GlassWorm malware has reared its ugly head again in the Open VSX registry, roughly two weeks after being removed.

"The threat actors have recently resorted to utilizing JSON storage services like JSON Keeper, JSONsilo, and npoint.io to ...

What’s more, to ensure that the message actually looked deceptively genuine, the AI also generated suitable domains as ...

"Hugging Face tokens are notorious for allowing access to private AI models," said Berkovich. "The leaked Hugging Face token belonging to an AI 50 company could have exposed access to ~1,000 private ...