open source

3 min read

• AI
• API
• CI/CD
• Cloud
• code developement
• CrowdStrike
• Cybersecurity
• hacking
• large language models
• Malware
• open source
• open source software
• Research
• Socket
• software development
• Threats

Malware is targeting AI tools in software development environments

Cyber Scoop July 22, 2026

Malware is targeting AI tools in software development environments...

Read More

5 min read

• AI executive order
• artificial intelligence (AI)
• Commentary
• critical infrastructure
• HackerOne
• NIST
• op-ed
• open source
• SBOM

Found fast, fixed slow: The gap the AI clearinghouse must close

Cyber Scoop July 8, 2026

Found fast, fixed slow: The gap the AI clearinghouse...

Read More

10 min read

• Æva Black
• AI
• Biden administration
• Chainguard
• Congress
• curl
• Cyber Resilience Act
• Cyber Safety Review Board
• cyber strategy
• Cybersecurity and Infrastructure Security Agency (CISA)
• Department of Defense (DOD)
• Department of Homeland Security (DHS)
• Edera
• Europe
• Executive order
• General Services Administration
• Geopolitics
• germany
• Government
• HuntedLabs
• Jack Cable
• Jen Easterly
• liability
• log4j
• memory safe language
• National Cyber Director
• Nick Andersen
• office of management and budget
• Office of the National Cyber Director
• open source
• open source software
• Pete Hegseth
• Policy
• Project Glasswing
• SBOM
• secure-by-design
• Senate Intelligence Committee
• Technology
• tom cotton
• Trump administration
• United Nations

Open-source security is posing challenges governments can’t easily solve

Cyber Scoop June 24, 2026

Open-source security is posing challenges governments can’t easily solve...

Read More

8 min read

• AntV
• Bitwarden
• Checkmarx
• CI/CD
• cybercrime
• Cybersecurity
• Exclusive
• extortion
• GitHub
• Google
• Google Threat Intelligence Group
• LiteLLM
• Mercer AI
• Microsoft DurableTask
• mini shai hulud
• Mistral AI
• Nx Console
• open source
• open source software
• Palo Alto Networks
• PyPI
• Python
• PyTorch Lightning
• ransomware
• Red Hat
• SAP
• ShinyHunters
• Sleuthcon
• Socket
• supply chain
• supply chain attacks
• supply chain security
• TanStack
• TeamPCP
• Telnyx
• Threats
• Trivy
• UiPath
• Vect
• Wiz

How software development’s speed obsession enabled TeamPCP’s chaos crusade

Cyber Scoop June 18, 2026

How software development’s speed obsession enabled TeamPCP’s chaos crusade...

Read More

3 min read

• Cybersecurity and Infrastructure Security Agency (CISA)
• Government
• Nick Andersen
• open source
• TeamPCP
• Technology

CISA chief frets about open-source vulnerabilities, delayed security improvements

Cyber Scoop May 21, 2026

CISA chief frets about open-source vulnerabilities, delayed security improvements...

Read More

4 min read

• AI
• AI agents
• artificial intelligence (AI)
• Cybersecurity
• incident response
• large language models
• Microsoft
• open source
• prompt injection
• red team
• vulnerability reporting

Meet Rampart and Clarity, Microsoft’s new red team combo AI agents

Cyber Scoop May 20, 2026

Meet Rampart and Clarity, Microsoft’s new red team combo...

Read More

3 min read

• application security
• CI/CD
• Cybersecurity
• GitHub
• Malware
• mini shai hulud
• open source
• Research
• SSH
• worm

Mini Shai-Hulud returns, compromising hundreds of npm packages

Cyber Scoop May 19, 2026

Mini Shai-Hulud returns, compromising hundreds of npm packages |...

Read More

4 min read

• cybercrime
• Cybersecurity
• Google Threat Intelligence Group
• Mandiant
• OAuth
• open source
• open source software
• ShinyHunters
• supply chain
• supply chain attacks
• supply chain security
• Threats
• Vercel

Vercel attack fallout expands to more customers and third-party systems

Cyber Scoop April 23, 2026

Vercel attack fallout expands to more customers and third-party...

Read More

3 min read

• AI
• AWS
• Context.ai
• CrowdStrike
• cybercrime
• Cybersecurity
• Google
• Google Threat Intelligence Group
• Google Workspace
• Mandiant
• OAuth
• open source
• open source software
• ShinyHunters
• supply chain
• supply chain attacks
• supply chain security
• Threats
• Vercel

Vercel’s security breach started with malware disguised as Roblox cheats

Cyber Scoop April 20, 2026

Vercel’s security breach started with malware disguised as Roblox...

Read More

4 min read

• AI
• artificial intelligence (AI)
• axios
• Commentary
• Elastic
• op-ed
• open source

Why the Axios attack proves AI is mandatory for supply chain security

Cyber Scoop April 20, 2026

Why the Axios attack proves AI is mandatory for...

Read More