open source software

3 min read

• AI
• API
• CI/CD
• Cloud
• code developement
• CrowdStrike
• Cybersecurity
• hacking
• large language models
• Malware
• open source
• open source software
• Research
• Socket
• software development
• Threats

Malware is targeting AI tools in software development environments

Cyber Scoop July 22, 2026

Malware is targeting AI tools in software development environments...

Read More

5 min read

• AI
• API
• application security
• artificial intelligence (AI)
• automation
• CISO
• Commentary
• Cybersecurity
• op-ed
• open source software
• risk
• secure-by-design
• supply chain
• Technology
• Threats
• vulnerabilities

AI-generated code has made security debt a governance problem

Cyber Scoop July 13, 2026

AI-generated code has made security debt a governance problem...

Read More

10 min read

• Æva Black
• AI
• Biden administration
• Chainguard
• Congress
• curl
• Cyber Resilience Act
• Cyber Safety Review Board
• cyber strategy
• Cybersecurity and Infrastructure Security Agency (CISA)
• Department of Defense (DOD)
• Department of Homeland Security (DHS)
• Edera
• Europe
• Executive order
• General Services Administration
• Geopolitics
• germany
• Government
• HuntedLabs
• Jack Cable
• Jen Easterly
• liability
• log4j
• memory safe language
• National Cyber Director
• Nick Andersen
• office of management and budget
• Office of the National Cyber Director
• open source
• open source software
• Pete Hegseth
• Policy
• Project Glasswing
• SBOM
• secure-by-design
• Senate Intelligence Committee
• Technology
• tom cotton
• Trump administration
• United Nations

Open-source security is posing challenges governments can’t easily solve

Cyber Scoop June 24, 2026

Open-source security is posing challenges governments can’t easily solve...

Read More

8 min read

• AntV
• Bitwarden
• Checkmarx
• CI/CD
• cybercrime
• Cybersecurity
• Exclusive
• extortion
• GitHub
• Google
• Google Threat Intelligence Group
• LiteLLM
• Mercer AI
• Microsoft DurableTask
• mini shai hulud
• Mistral AI
• Nx Console
• open source
• open source software
• Palo Alto Networks
• PyPI
• Python
• PyTorch Lightning
• ransomware
• Red Hat
• SAP
• ShinyHunters
• Sleuthcon
• Socket
• supply chain
• supply chain attacks
• supply chain security
• TanStack
• TeamPCP
• Telnyx
• Threats
• Trivy
• UiPath
• Vect
• Wiz

How software development’s speed obsession enabled TeamPCP’s chaos crusade

Cyber Scoop June 18, 2026

How software development’s speed obsession enabled TeamPCP’s chaos crusade...

Read More

3 min read

• Aikido Security
• Docker
• GitHub
• incident response
• Microsoft
• npm
• open source software
• supply chain attacks
• Threats
• Visual Studio

GitHub says internal repositories were taken in poisoned VS Code extension attack

Cyber Scoop May 20, 2026

GitHub says internal repositories were taken in poisoned VS...

Read More

5 min read

• AI
• Aikido Security
• artificial intelligence (AI)
• CI/CD
• Cybersecurity
• mini shai hulud
• npm
• open source software
• Shai Hulud
• snyk
• Socket
• supply chain
• Threats

‘Mini Shai-Hulud’ malware compromises hundreds of open-source packages in sprawling supply-chain attack

Cyber Scoop May 12, 2026

‘Mini Shai-Hulud’ malware compromises hundreds of open-source packages in...

Read More

4 min read

• cybercrime
• Cybersecurity
• Google Threat Intelligence Group
• Mandiant
• OAuth
• open source
• open source software
• ShinyHunters
• supply chain
• supply chain attacks
• supply chain security
• Threats
• Vercel

Vercel attack fallout expands to more customers and third-party systems

Cyber Scoop April 23, 2026

Vercel attack fallout expands to more customers and third-party...

Read More

3 min read

• AI
• AWS
• Context.ai
• CrowdStrike
• cybercrime
• Cybersecurity
• Google
• Google Threat Intelligence Group
• Google Workspace
• Mandiant
• OAuth
• open source
• open source software
• ShinyHunters
• supply chain
• supply chain attacks
• supply chain security
• Threats
• Vercel

Vercel’s security breach started with malware disguised as Roblox cheats

Cyber Scoop April 20, 2026

Vercel’s security breach started with malware disguised as Roblox...

Read More

3 min read

• AI
• artificial intelligence (AI)
• cybercrime
• Cybersecurity
• hacking
• open source
• open source software
• OpenAI
• Research
• supply chain
• supply chain attacks
• Technology
• Threats

OpenAI’s Mac apps needs an update thanks to the Axios hack

Cyber Scoop April 13, 2026

OpenAI’s Mac apps needs an update thanks to the...

Read More

3 min read

• Aqua Security
• cybercrime
• Cybersecurity
• data breaches
• Mandiant
• open source
• open source software
• RSAC 2026 Conference
• supply chain
• supply chain attacks
• Threats
• Trivy

Experts warn of a ‘loud and aggressive’ extortion wave following Trivy hack

Cyber Scoop March 24, 2026

Experts warn of a ‘loud and aggressive’ extortion wave...

Read More