Three incidents hit at least nine languages and six Linux distributions in 48 hours. If you’re wondering whether you need to ...

A malicious build of LiteLLM 1.107.0 shipped to PyPI and container registries with Python startup hooks that steal credentials on every interpreter launch, including LiteLLM's own stored provider keys ...

Eight eMudhra intermediate CA keys were compromised, six of them letting anyone who holds them impersonate any website or service. Browsers are already protected. Many non-browser clients are not, and ...

Every campaign has a story behind it. Ours happens to be a bedtime story. Read it to your kids. Read it to a little one in your life. Read it by yourself with a cup of coffee when you just "need a ...

Most AppSec teams don’t lack ambition; they lack a map. Place your program on four levels of AI maturity across two tracks, and learn what to build, what to buy, and where teams stall. AI coding ...

By default, Endor Labs AI SAST and AI Chat send model requests to our provider accounts. With BYOK, those model requests go ...

Partnership Brings Together Reachability-Backed Static Analysis and Runtime Exploit Validation to prioritize and fix ...

As of mid-August 2026, the number of Cyber Resilience Act harmonized standards published in the Official Journal is zero. Not "a handful" — zero. The Article 27 presumption of conformity is therefore ...

SAST (Static Application Security Testing) is a white-box method that analyzes an application's source code, bytecode, or binaries for security flaws without running it. It reads code the way a ...

Cursor with Gemini 4 Argon matches Fable 5 at 29% SecPass — tying for the top security score on Cursor — and uniquely solves two tasks no other combo on the leaderboard secures. But it is also the ...

Malware in the software supply chain is surging. More than 90% of all malware advisories for open source software ever filed landed in 2025 alone. The threat is evolving fast. Organizational defenses ...