Key Points Introduction ARTEX is a Chinese open-source, AI-powered penetration testing platform designed to help security ...
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: r/opensource bans AI ...
October brought a heavy run of cybersecurity disclosures involving cryptocurrency exchanges, web servers, AI tools, software ...
Volunteer-led PHP, which powers most websites, is increasingly under threat from cyberattacks using AI capabilities.
Hackers are using Coruna and DarkSword exploit chains across a large web network to compromise vulnerable iPhones without ...
Seven months after Google Threat Intelligence Group (GTIG) published its initial analysis of the Coruna iOS exploit framework ...
Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
Blocking install scripts closes one route for malicious npm packages. The malicious indexed-btree package shows why ...
Compare five SCA tools for detecting malicious open-source packages, from behavioral analysis and install-time blocking to ...
The blockchain suspended its layer-1 network and rollups after security researchers identified unauthorized token minting and millions in assets transferred to Ethereum. Initia halted its layer-1 ...
The PHP Project provides instructions to stop further RCE exploits in limited settings. A flaw in PHP triggered a worldwide scramble to patch vulnerable websites, and now, further instructions have ...
The numbers behind the trend are blunt. Sonatype’s 2026 State of the Software Supply Chain report counted more than 454,600 new malicious open-source packages in 2025, pushing the cumulative total it ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results