Bitwarden CLI 2026.4.0 was compromised via GitHub Actions in Checkmarx campaign, exposing secrets and distributing malicious ...
Malicious KICS Docker tags and VS Code versions 1.17.0, 1.19.0 enabled data exfiltration, risking exposed infrastructure ...
Hackers have compromised Docker images, VSCode and Open VSX extensions for the Checkmarx KICS analysis tool to harvest ...
Cloudsmith secures $72M in funding to boost AI software supply chain security and expand enterprise growth in a fast-changing tech landscape.
Cloudsmith raises a $72M Series C led by TCV and Insight Partners to govern and secure the AI-generated software supply chain.
A malicious version of the Bitwarden command-line interface (CLI) password manager was briefly distributed via the Node ...
In March 2026, Trivy, one of the most widely used open-source vulnerability scanners in the Kubernetes ecosystem, was weaponized against the very organizations that relied on it for security.
Uniqode reports many marketers excel in QR Code engagement but struggle to connect scans to revenue, highlighting the need ...
Explores Zero Trust, SBOM, and practical steps to secure the software supply chain, boost resilience, and communicate risk to leadership.
When you head out to grab a fast food burger, you might not be thinking about how the employees look, but it's highly ...
When 500,000 Findings Hide 14 Real Threats Modern enterprises ingest vulnerability data from dozens of sources: endpoint ...
Homeowners spend an average of 1% to 4% of their home's value on maintenance and repairs each year. Here's how to budget for ...