AILessons from the Hugging Face breach caused by OpenAI agents
An analysis of key characteristics of AI agent-driven cyberattacks, why open-source models are sufficient to execute them, and what measures can help defend an organization.
supply chainnpm registry attacked by secret-stealing worm
A new large-scale attack on a popular JavaScript code registry has hit around 150 packages. The automatic propagation of the threat makes it especially dangerous — developers need to react ASAP.
Serious NX build compromise — what you need to know about the s1ngularity attack
A popular developer tool has been trojanized and is uploading secrets to public GitHub repositories. We discuss what’s important to know for both developers and cybersecurity services.
Trusted relationships: how to prevent supply-chain attacks
Attacks on companies via their suppliers and contractors are becoming increasingly widespread. How can you manage this risk?
TechnologyNDR: the forefront of your company’s defense
What IT and cybersecurity leaders need to know about implementing network detection and response.
incident responseHow to learn from a cybersecurity incident
Analyzing incidents and drawing lessons from them should be an integral part of the incident response process. This can help improve the overall security level of a company.