Ghosts in the machine: AI malware shows why it is time to extend zero trust to code

AI-generated malware is outpacing human-centered security controls, find out how enterprises can fight back.
Krebs on Security

‘Trojan Source’ Bug Threatens the Security of All Code

Virtually all compilers — programs that transform human-readable source code into computer-executable machine code — are vulnerable to an insidious attack in which an adversary can introduce targeted ...
The Next Web

CISA orders a three-day patch after a flaw in the Ray AI framework comes under active attack

CISA has added CVE-2025-62593, a code-injection flaw in the open-source Ray AI framework, to its Known Exploited Vulnerabilities catalogue.
techtimes

Detecting Sensitive Data Leaks in Source Code: Ziyu Wang’s Machine Learning Approach to Securing Modern Development Pipelines

The widespread adoption of open-source and enterprise software has accelerated development velocity but also expanded the attack surface. Among the most pressing concerns is the unintentional exposure ...
Hosted on MSN

This wild AI tool rips off open source code without breaking copyright

In early 2025, a class-action lawsuit against GitHub, Microsoft, and OpenAI over Copilot’s use of open-source training data was still grinding through federal court. By spring 2026, the case remains ...
Krebs on Security

Leaked Chats Show LAPSUS$ Stole T-Mobile Source Code

KrebsOnSecurity recently reviewed a copy of the private chat messages between members of the LAPSUS$ cybercrime group in the week leading up to the arrest of its most active members last month. The ...
The Next Web

GitHub Copilot works so well because it steals open-source code and strips credit

The Software Freedom Conservancy (SFC), a non-profit community of open-source advocates, today announced its withdrawal from GitHub in a scathing blog post urging members and supporters to rebuke the ...