Malicious npm campaign targets developers integrating Twilio
The package poses as a security tool targeting developers looking to implement Internet-based apps with telecom networks.
Featured
Malicious npm campaign targets developers integrating Twilio
AI changes cyber spending — but where’s the line-item for tokens?
Organizations’ cyber dollars are shifting, not growing. But AI compute costs can spiral — and that is why context matters in your agentic SOC.
Agentic AI permissions: A core problem — but not the only one
Controlling coding agent overpermissioning is key to security. But recent frontier AI incidents show that problems don’t stop there.
Latest
AI changes cyber spending — but where’s the line-item for tokens?
Organizations’ cyber dollars are shifting, not growing. But AI compute costs can spiral — and that is why context matters in your agentic SOC.
Malicious npm campaign targets developers integrating Twilio
The package poses as a security tool targeting developers looking to implement Internet-based apps with telecom networks.
Agentic AI permissions: A core problem — but not the only one
Controlling coding agent overpermissioning is key to security. But recent frontier AI incidents show that problems don’t stop there.
Memory-safe programming goes from advocacy to adoption
The coding languages shift — fueled by Microsoft, Google, and Amazon and enabled by AI coding — is driven by the quest for secure software.
AI coding puts Secure by Design in the spotlight
The software industry is entering the AI era burdened by legacy flaws and weaknesses, making Secure by Design essential.
Rubrik + RL: Bring Threat Intelligence and Detection to Backups
With this integration, Rubrik users can now tap ReversingLabs' ransomware feed to decide whether each file in their backup is safe.
OpenAI: Hugging Face mob agent incident is 'a warning shot'
The post-mortem reaches sobering conclusions, and demands a plan of action for the AI industry — plus your SecOps strategy.
AI summary attack conceals code that tampers with LLMs
Research confirms email summary design flaws — and that any unverified content is an attack vector, so invest in threat intel.
Best Enterprise File Scanning Tools of 2026
This guide compares leading file security tools across connector coverage, throughput, file-size range, and file-type breadth.
Get the Spectra Assure Community Plugin for JFrog Artifactory
Package managers auto-pull the latest OSS version — malware included. Protect your pipelines with this free plugin.
How to build effective agentic SOCs: What you need to know
ExtraHop's Kanaiya Vasani unpacks the concept of the agentic SOC — and how the Agentic SOC Alliance is working to build them out.
Shai-Hulud worm arrests: Why this is not the end
The TeamPCP actors, alleged to be behind one of the most active supply chain threats, were arrested — but this is not the end of Shai-Hulud.
Extend CrowdStrike Falcon with Permanent Intelligence
ReversingLabs built a Spectra Analyze integration with CrowdStrike Falcon. The connector is available now as part of Spectra Analyze v9.6.0.
Infostealers highlight malware-as-a-service trend
Aurastealer, ACRStealer, and RemusStealer, a new potential LumaStealer variant, show MaaS in action. Here's what you need to know.
Agentic AI scales semiautonomous server attacks
UAT-10147 leveraged agentic AI to go beyond scripting to deliver a backdoor. The method highlights the need for agentic SOCs.