BLAKE3 beats SHA3-256 by up to 12x on throughput benchmarks, but SHA-3 keeps its FIPS 202 edge. Full specs, pricing, and ...

How OpenAI's AI agents escaped an eval sandbox, built a secret message board, and hacked Hugging Face, plus 8 lessons for ...

For much of the past two years, the AI market has been defined by a small group of U.S. companies operating at the frontier ...

Business teams are vibe coding prototypes faster than anyone in security can count them, and those prototypes are at their ...

We're a long way from Kali Linux here, Toto. Grayware - software that behaves like malware without being technically malicious - is now blocked by default across Chainguard’s stack. There's a lot to ...

In addition to quadrupling Chrome bug bounty, Google has released another major security update for its browser, which fixes dozens of vulnerabilities. The update, released yesterday, addresses 37 ...

Chainguard Libraries now includes CVE remediation for JavaScript and Go; customers also receive protections from frontier ...

AI is evolving at a rapid pace, and the uptake of Generative AI (GenAI) is revolutionising the way humans interact and ...

Milestone: Since Sonatype began tracking malicious open source packages in 2017, we have logged nearly 2 million malicious packages. Scale: Sonatype Research Labs logged 149,329 open source malware ...

Security researchers have detailed MALFEX, an npm supply-chain campaign that uses eight malicious packages to deliver remote ...

The Russia-aligned threat actor known as UAC-0099 has been attributed to a previously undocumented .NET infostealer and ...

Kroah-Hartman started with a plot of the number of kernel CVE numbers that were fixed with each release; a version of that plot appears to the right. The trend is clear: after running at a steady rate ...