#malicious-code

#malicious-code

AI-generated software packages were incorporated by businesses, potentially leading to the propagation of malicious code.

Hallucinated code by AI turned into a real package ended up being downloaded thousands of times, highlighting the risk of AI-generated dependencies. [ more ]

Developers facing security threat from infected GitHub repositories

Malicious repo confusion attacks impacting developers [ more ]

Unknown threat actors are actively exploiting two zero-day vulnerabilities in Ivanti Connect Secure, a widely used VPN appliance.

The vulnerabilities allow attackers to bypass two-factor authentication and execute malicious code inside networks. [ more ]