Mythos 5 Pressured a Real GitHub Maintainer With Fake Accounts in a UK AISI Test, and Anthropic and AISI Weigh the Newer Models’ Improvement Differently
Anthropic and the UK AI Security Institute published separate...
Browse Tag
Supply Chain Security
30 Articles
How to Audit Python Dependencies With CycloneDX SBOMs and pip-audit, and Find a Malicious Release PyPI Has Already Deleted
Build CycloneDX SBOMs for Python services, audit them with...
Eye Security Says It Used Popcorn Time’s Abandoned Updater to Disable It on Over a Million Systems, and Three of the 20 Domains It Lists Are Still Outside the Sinkhole
Eye Security says it registered the lapsed domains behind...
A Poisoned LiteLLM 1.107.0 Sat on PyPI for 103 Minutes, Published by the Project’s Own Pipeline From a Repository One Hyphen Away From the Real One
LiteLLM says attackers used three engineers’ stolen GitHub...
Microsoft Ties the ConnectWise Attacks to a China-Aligned Group and the ARTEX AI Framework, Citing 2,250 Tenants Targeted but No Count of Compromises
Microsoft says the China-aligned group Storm-0940 used the ARTEX...
DHS Orders Federal Civilian Agencies to Remove DeepSeek in an Order That Carries a July 24 Release Date
DHS’s FASCSA order excludes DeepSeek from federal civilian...
A Compromised ConnectWise Cloud Backup Credential Let Attackers Sign In to Microsoft 365 Tenants as the Backup App
ConnectWise is shutting off Cloud Backup after attackers used...
Some Rank Math PRO 3.0.123 Downloads Carried Malware for 11 Hours, and Updating Will Not Clean an Infected Site
Rank Math says PRO 3.0.123 copies downloaded in an 11-hour...
A Compromised Admin Account Put the Shai-Hulud Worm Into AI Sandbox Maker Tensorlake’s npm SDK
A poisoned Tensorlake SDK release reached npm through the...
How to Audit Python .pth Startup Hooks and Migrate to Python 3.15 .start Files
Learn how Python .pth import lines run code at every startup,...