To protect the Pixel modem from zero-day attacks, Google focused on the DNS parser. As cellular features have migrated to ...

The 2024 XZ incident illustrates how open-source software (OSS) has become strategic infrastructure in the global economy, ...

Last week, something alarming happened in the world of software — and almost nobody outside the tech industry noticed. A ...

OpenAI revoked its macOS signing certificate after a malicious Axios dependency incident on March 31, 2026, preventing ...

Spread the loveIn a chilling reminder of the vulnerabilities inherent in open source software, two significant supply chain attacks occurred in March 2026, targeting widely used tools that affect a ...

AI lets you code at warp speed, but without Agile "safety nets" like pair programming and automated tests, you're just ...

In-house software built in March with open-source components may include malware placed there by criminals. This isn’t a ...

Two CISOs dissect the Axios npm attack, revealing a self-erasing RAT, CI/CD compromise risks and why open-source software ...

Meta has indefinitely paused work with $10B AI data startup Mercor after a LiteLLM supply chain attack exposed training ...

This week his SpaceX reportedly filed confidentially for a $75 billion initial public offering that could value it at $1.75T.

The biggest story of the week is a new massive supply chain breach, which appears to be unrelated to the previous massive supply chain breaches, this time of the Axios HTTP project. Axios was ...

SUPPLYSHIELD combines large-scale AI systems with human validation to maintain secure versions of libraries across the full dependency tree. When new vulnerabilities are disclosed, the platform ...