Latest cybersecurity reporting from selected sources.

Open-Source Models Hallucinate More Than Commercial Ones, Found StudyGenerative artificial intelligence assistants promise to streamline coding, but large language models' tendency to invent non-existent package names has led to a new supply chain hazard known as "slopsquatting," where attackers register phantom dependencies to slip malicious code into deployments.

Millions of software repositories on GitHub are likely vulnerable to an attack called RepoJacking, a new study has revealed

New data shows cyberattacks targeting software supply chains will cost the global economy $80.6 billion annually by 2026.

Study highlights threat detection challenge for many organizations

Netwrix study reveals that manufacturing organizations experienced these types of attacks more often than any other industry surveyed.

With speculative execution attacks remaining a stubbornly persistent vulnerability ailing modern processors, new research has highlighted an "industry failure" to adopting mitigations released by AMD and Intel, posing a firmware supply chain threat

A new study says 97% of open source vulnerabilities linked to software supply chain risks are not attackable — but is "attackability" the best method for prioritizing bugs?