OpenClaw’s ClawHub breach reveals how rogue AI skills can bypass scans, alter agent behavior, and expose enterprise systems ...

This month’s updates help security and IT teams strengthen identity and multicloud foundations, protect data wherever it ...

When AI-assisted vulnerability discovery makes it dramatically easier to identify weaknesses hidden inside modern dependency ...

AIR says static scanning failed to detect a skill that redirected to a controlled domain and later altered its payload.

Explore the leading application security tools of 2026 designed for enterprises. Understand their features, pricing models, and integration guidance for Indian and APAC businesses to enhance cyber ...

Researchers found Cordyceps CI/CD flaws affecting 300+ repositories, enabling code execution, credential theft, and supply ...

Cordyceps, a systemic class of exploitable CI/CD vulnerabilities, allows unauthenticated attackers to hijack developer ...

The Enlightn Security Checker is a command line tool that checks if your application uses dependencies with known security vulnerabilities. It uses the Security Advisories Database. This command will ...

Chainguard is expanding Repository with new policy controls, malware and greyware scanning, and support for Java, Python, and container artifacts-helping organizations govern software consumption ...

Empty envelopes arriving in your mailbox could be tied to brushing scams where sellers fake verified reviews using your ...

That's according to Dan Lorenc, CEO and co-founder of Chainguard, a software supply-chain security company leading Athena, a newly formed coalition of about two dozen companies that wants to make the ...

OpenClaw removed five packages from ClawHub, its skills marketplace, that bypassed security even though they included ...