Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.
Search across headline titles and summaries.
Weekly headline count for the current query.
A new study of integrated development environments (IDEs) like Microsoft Visual Studio Code, Visual Studio, IntelliJ IDEA, and Cursor has revealed weaknesses in how they handle the extension verification process, ultimately enabling attackers to execute malicious code on developer machines
Open-Source Models Hallucinate More Than Commercial Ones, Found StudyGenerative artificial intelligence assistants promise to streamline coding, but large language models' tendency to invent non-existent package names has led to a new supply chain hazard known as "slopsquatting," where attackers register phantom dependencies to slip malicious code into deployments.
All depends on how you count it – Chocolate Factory claims 1% fail rate Google this week offered reassurance that its vetting of Chrome extensions catches most malicious code, even as it acknowledged that "as with any software, extensions can also introduce risk."…
Study also finds LLMs are poor at detecting malicious code
A group of academics has demonstrated novel attacks that leverage Text-to-SQL models to produce malicious code that could enable adversaries to glean sensitive information and stage denial-of-service (DoS) attacks