At this week's Black Hat Europe conference, two researchers urged developers to adopt a shared responsibility model for open ...

Cybersecurity researchers Kaspersky said they found 15 malicious repositories hosted on GitHub. These repositories, apparently crafted with the help of Generative Artificial Intelligence (Gen AI), ...

Hundreds of trojanized versions of well-known packages such as Zapier, ENS Domains, PostHog, and Postman have been planted in the npm registry in a new Shai-Hulud supply-chain campaign. The malicious ...

Shai Hulud is a malware campaign first observed in September targeting the JavaScript ecosystem that focuses on supply chain ...

PyStoreRAT spreads via fake GitHub tools using small Python or JavaScript loaders to fetch HTA files and install a modular ...

A malicious npm package with more than 56,000 downloads masquerades as a working WhatsApp Web API library, and then it steals ...

Learn how to deploy Google AI Studio apps using Cloud Run and GitHub, with API key security, so you can go live safely and fast.

Depending who you ask, AI-powered coding is either giving software developers an unprecedented productivity boost or churning ...

Why Code Signing Isn’t Optional? If you’ve ever tried running an unsigned app on macOS, you already know how brutal the experience is. You double-click your .app file, and that dreaded message appears ...

Software supply chain attacks are evolving as open source and AI-generated code introduce new third-party risks. Learn how ...

This article contains 10 of what we believe to be the biggest stories we covered throughout the year on SD Times.