Enterprise Security Tech

A widely used open source security tool at the center of modern software pipelines has been compromised again, raising new concerns about how attackers are targeting the software supply chain to access sensitive developer infrastructure. Trivy , the vulnerability scanner maintained by Aqua Security, was recently exploited to distribute malware through its official GitHub Actions integrations. The incident marks the second breach involving the project in less than a month, sig

A new wave of AI-driven cybersecurity tools is reshaping how software vulnerabilities are discovered, validated, and exploited, compressing what once took months of expert human effort into hours. According to new research from Theori , large language models can now scan millions of lines of code and identify high-impact security flaws in less than a day. The findings highlight a turning point for both defenders and attackers as AI accelerates the speed and scale of software

This guest article was contributed by Alastair Parr, CTO of Spur A growing share of the traffic security teams evaluate each day comes from residential proxies that pool IP addresses from consumer ISPs and mobile devices. Most people don’t realize they’ve opted into a residential proxy, and most organizations lack the context to fully understand how often this traffic reaches them. Residential proxies make it difficult to distinguish legitimate traffic from malicious activity

A newly disclosed set of vulnerabilities in the Linux AppArmor security module could allow attackers to escalate privileges to root, potentially undermining security protections across millions of enterprise systems. The flaws, collectively dubbed “CrackArmor,” were uncovered by the Qualys Threat Research Unit and affect Linux environments where AppArmor is enabled by default, including Ubuntu, Debian, and SUSE deployments. According to researchers, the issue stems from a de

A cyberattack that crippled systems at medical device manufacturer Stryker has triggered concern among cybersecurity researchers and policymakers, raising new questions about how geopolitical tensions are spilling into corporate networks. The incident came to light after employees across multiple regions reported that company-issued laptops, phones, and computers had suddenly been wiped of data. Workers in the United States, Ireland, Australia, and India were locked out of c

Open source software powers nearly every modern application. From small startups to global enterprises, developers rely on open source libraries to build products faster and reduce development costs. But security researchers say that same ecosystem is now one of the largest and fastest growing sources of risk in the software supply chain. Industry data from Secure shows that more than 84 percent of codebases contain at least one open source vulnerability. On average, applica