Researchers outline how the PhantomRaven campaign exploits hole in npm to enable software supply chain attacks.

Currently in private beta, the GPT-5-powered security agent scans, reasons, and patches software like a real researcher, ...

Eclipse Foundation, which maintains the open-source Open VSX project, said it has taken steps to revoke a small number of ...

A remote access trojan dubbed SleepyDuck, and disguised as the well-known Solidity extension in the Open VSX open-source ...

Discover the security risks in vibe-coded applications as we uncover over 2,000 vulnerabilities, exposed secrets, and PII ...

Aardvark represents OpenAI’s entry into automated security research through agentic AI. By combining GPT-5’s language ...

"Aardvark represents a breakthrough in AI and security research: an autonomous agent that can help developers and security teams discover and fix security vulnerabilities at scale," the company said ...

The backbone breaker benchmark (b3) is a new evaluation tool created by the AISI, Check Point and Check Point subsidiary ...

A comparison of Snyk and SonarQube for cloud-native security. Learn which tool is better for container scanning, IaC, and ...

Open VSX fully contained the GlassWorm attacks and says it was not a self-replicating worm in the traditional sense. The GlassWorm campaign that infected VS Code extensions in the Open VSX marketplace ...

OpenAI has introduced Aardvark, an AI-powered security researcher tool. Built on its flagship GPT-5 model, the system is designed to help developers and security teams explore vulnerabilities in ...

In a digital era where software vulnerabilities can topple companies and compromise entire infrastructures overnight, ...