Archiv für Mai 2026

📄
soc

Supply Chain Compromises Impact Nx Console and GitHub Repositories

von CISA Current Activity •

CISA is prioritizing the response to multiple emerging software supply chain intrusion campaigns targeting developer ecosystems Continuous Integration/Continuous Development (CI/CD) pipelines. These recent incidents, including the GitHub compromise via a malicious Nx Console Visual Studio Code (VS Code) extension and the “Megalodon” supply chain intrusion campaign, demonstrate how cyber threat actors are abusing tools and […]

Mehr lesen →
📄
security

New Edamame Platform Aims to Catch AI Coding Agents Going Off the Rails

von SecurityWeek •

France-based startup Edamame says its runtime verification platform uses host telemetry and AI analysis to detect coding-agent “intent drift,” secret theft and supply-chain attacks in real time. The post New Edamame Platform Aims to Catch AI Coding Agents Going Off the Rails appeared first on SecurityWeek.

Mehr lesen →