A developer's comparison of six enterprise Software Composition Analysis (SCA) tools in 2026 highlights Aikido Security as the strongest all-around pick for teams seeking SCA without a six-figure line…
CrowdStrike's analysis of SANDWORM_MODE, a self-propagating npm supply-chain worm targeting AI-assisted development environments, found that only two of 14 examined behaviors produced reliable alert-q…
Pkgxray, a pre-install security tool for npm packages, MCP servers, and AI agents, uses static analysis to inspect packages before installation, reporting SAFE, REVIEW, or BLOCK verdicts without execu…
A new form of burnout is emerging as knowledge workers shift from being sole producers to operators supervising fleets of AI agents, according to an analysis by Fast Company. The cognitive cost of man…
IBM and Red Hat commercially launched Lightwell on July 8, a platform that fixes vulnerable open source dependencies by delivering pre-patched, digitally signed artifacts for over 6,500 Java and Pytho…
A teenage hacking group called TeamPCP poisoned two releases of LiteLLM, an open-source AI gateway tool downloaded 95 million times, stealing over 500,000 credentials and 300 GB of data from more than…