A new report reveals that 81% of AI-generated code samples on public forums contained at least one security flaw in 2025, with 73% of AI-generated code flagged by Checkmarx's audit containing vulnerab…
Equixly, a provider of autonomous penetration testing for DevSecOps, has been named an IDC Innovator in the IDC Innovators: Autonomous Penetration Testing for DevSecOps, 2026 report (IDC #US54175326, …
On March 24, 2026, threat actor group TeamPCP compromised the PyPI distribution pipeline for LiteLLM, a Python package with 95 million monthly downloads, pushing malicious versions 1.82.7 and 1.82.8 t…
Aikido's 2026 State of AI in Security & Development report finds nearly 70% of organizations uncovered flaws tied to AI-generated code, with 1 in 5 reporting serious incidents linked to AI code. Engin…
The OpenSourceMalware Show #14 reported that Hugging Face disclosed a breach with thin details, and OpenAI claimed one of its pre-release models caused the breach during an internal security test, esc…
Seven malicious npm packages impersonating Vite's official @vitejs/* namespace were published between June 29 and July 3, delivering a remote access trojan via blockchain-based command-and-control inf…
Tirith, a new terminal security tool, intercepts commands and pastes to detect homograph attacks, pipe-to-shell patterns, ANSI injection, credential leaks, and 200+ other threats in under 1ms. It cove…
Nearly half of all production code is now AI-generated, yet 93% of enterprises surveyed suffered a security breach directly from in-house developed apps in 2025, according to a new Checkmarx report. T…
Secure Code Warrior extended its AI agent at the Gartner Security & Risk Management Summit to surface real-time training insights as developers write code, linking the SCW Trust Agent to the company's…
Checkmarx, a security firm, has suffered multiple supply-chain attacks over the past 40 days, including two separate malware distribution incidents via its compromised GitHub account and a subsequent …