Cyber Security AsyncAPI npm package compromise shows provenance is not a complete supply-chain defense CyberOGZ Team Jul 16 181
Cyber Security Microsoft expands Zero Trust guidance for AI agents and DevSecOps CyberOGZ Team Aug 06 213
Cyber Security GitHub restricts npm 2FA-bypass tokens to reduce package supply chain risk CyberOGZ Team Aug 01 169
Cyber Security GitHub adds publish-time malware scanning and dual-use metadata rules for npm packages CyberOGZ Team Jul 29 243
Cyber Security IBM and Red Hat launch Lightwell to automate open source vulnerability remediation CyberOGZ Team Jul 09 195
Cyber Security CISA publishes federal guide for secure open source software and AI model use CyberOGZ Team Jul 31 230
Cyber Security Microsoft launches EXTRA to expand AI red teaming with university and regional experts CyberOGZ Team Jul 28 283
Cyber Security Hugging Face CEO seeks transparency after OpenAI model-evaluation security incident CyberOGZ Team Jul 27 227
Cyber Security OpenAI says its models drove a Hugging Face security incident during cyber evaluation CyberOGZ Team Jul 23 232
Cyber Security GitHub brings AI security detections into pull request code scanning CyberOGZ Team Jul 15 265
Cyber Security Microsoft says Secure Future Initiative hardening now covers identity, cloud isolation and quantum-safe planning CyberOGZ Team Jul 11 206