AI-driven supply chain attacks surged 156% as breaches grew harder to detect and regulators imposed massive fines.

"Hugging Face tokens are notorious for allowing access to private AI models," said Berkovich. "The leaked Hugging Face token belonging to an AI 50 company could have exposed access to ~1,000 private ...

Researchers say the malware was in the repository for two weeks, advise precautions to defend against malicious packages.

Goal is to steal Tea tokens by inflating package downloads, possibly for profit when the system can be monetized.

If you’ve been in the security universe for the last few decades, you’ve heard of the OWASP Top Ten. It’s a list of 10 security problems that we move around every year and never really solve. Oh sure, ...

Supply-chain attacks have evolved considerably in the las two years going from dependency confusion or stolen SSL among ...

If you could only own 3 cars for the rest of your life — what would they be? In this video, I reveal my perfect 3-car garage ...

A new proof-of-concept attack shows that malicious Model Context Protocol servers can inject JavaScript into Cursor’s browser ...

Vulnerabilities in AI-assisted technology can snowball into national security risks; building safeguards and governance ...

Thank you, Nicole. Good afternoon, and thank you for joining us as we review JFrog's Third Quarter 2025 Financial Results, which were announced following the market close today via press release.