The Register
2 months, 2 weeks ago
Ongoing supply-chain attack 'explicitly targeting' security, dev tools
Vendor confirms repo data exposure after Lapsus$ claims source code, secrets dump
Security news aggregator
Latest cybersecurity reporting from selected sources.
Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.
3
headlines in this view
Refine the feed
Search across headline titles and summaries.
Volume over time
Weekly headline count for the current query.
Showing 3 most recent headlines
Filtered view
The Register
2 months, 2 weeks ago
Ongoing supply-chain attack 'explicitly targeting' security, dev tools
Vendor confirms repo data exposure after Lapsus$ claims source code, secrets dump Software security testing outfit Checkmarx has become the latest organization caught up in an ongoing attack on security-tool providers. The biz said data posted online appears to have come from one of its GitHub repositories after the Lapsus$ extortion crew claimed to have dumped the company’s source code, secrets, and other sensitive data.…
Bank Info Security
3 months, 2 weeks ago
Your AI Vendor's Worst Enemy Is Its Own Development Pipeline
Anthropic's Mythos Leak Points to Pattern of Failures, Sloppy Practices at AI LabsAnthropic accidentally exposed its most powerful unreleased AI model to compromise, and days later shipped its flagship coding tool's full source code without meaning to. Meta, Microsoft and OpenAI have each had comparable moments. Questions linger about the integrity of third-party AI tools.