Do Son OpenAI's new "Codex for Open Source" offers maintainers 6 months of ChatGPT Pro and Codex Security. Is your repository eligible for this $1,200 AI grant?
Software security
Ubisoft takes Rainbow Six Siege offline after a massive backend breach. Hackers gifted 2 billion credits to players and hijacked the game's ban system.
CISA, FBI, and NSA call for adopting memory-safe languages (Rust, Go, Java, Swift) to slash software vulnerabilities. Android saw a 52% drop in memory bugs after embracing MSLs.
Socket uncovers malicious RubyGems impersonating Fastlane plugins, stealing sensitive CI/CD data by rerouting Telegram API calls. Beware of fastlane-plugin-telegram-proxy!
Discover VulBinLLM, a groundbreaking LLM-powered framework by UCLA & Cisco Research, revolutionizing binary vulnerability detection in stripped software.
Critical stack overflow in libexpat (CVE-2024-8176) allows DoS and potential memory corruption via malicious XML. Update to 2.7.0 now!
Malicious npm packages are targeting Telegram bot developers, installing SSH backdoors and stealing data. Learn how this supply chain attack works and how to protect yourself.
FortiGuard Labs discovers malicious NPM packages targeting PayPal users. Attackers use deceptive tactics to steal usernames, paths, and hostnames