Cybersecurity researchers Kaspersky said they found 15 malicious repositories hosted on GitHub. These repositories, apparently crafted with the help of Generative Artificial Intelligence (Gen AI), ...

At this week's Black Hat Europe conference, two researchers urged developers to adopt a shared responsibility model for open ...

Hundreds of trojanized versions of well-known packages such as Zapier, ENS Domains, PostHog, and Postman have been planted in the npm registry in a new Shai-Hulud supply-chain campaign. The malicious ...

Shai Hulud is a malware campaign first observed in September targeting the JavaScript ecosystem that focuses on supply chain ...

A malicious npm package with more than 56,000 downloads masquerades as a working WhatsApp Web API library, and then it steals ...

PyStoreRAT spreads via fake GitHub tools using small Python or JavaScript loaders to fetch HTA files and install a modular ...

Learn how to deploy Google AI Studio apps using Cloud Run and GitHub, with API key security, so you can go live safely and fast.

Depending who you ask, AI-powered coding is either giving software developers an unprecedented productivity boost or churning ...

Software supply chain attacks are evolving as open source and AI-generated code introduce new third-party risks. Learn how ...

This article contains 10 of what we believe to be the biggest stories we covered throughout the year on SD Times.