Malicious PyPI packages, repo hijacks, and CVEs in Python containers put devs at risk. Learn how to stay secure.

Chainguard, the secure foundation for software development and deployment, today announced that it listed Chainguard Containers in the AWS Marketplace for the U.S. Intelligence Community (ICMP). ICMP ...

Experts, including Allan Friedman, CISA's leading voice on SBOMs until July 2025, emphasized that AI BOMs should be standardized before being implemented ...

Many companies lack visibility into complex digital supply chains, meaning hidden risks and regulatory exposure. Cyber ...

In response, the National Institute of Standards and Technology (NIST) launched a multi-year effort to standardize post-quantum cryptographic (PQC) algorithms resistant to quantum attacks. This ...

The developer tool stack and product architecture has fundamentally changed in the AI era. With the launch of the JFrog MCP ...

North Korea's infamous Lazarus Group hackers are increasing their weaponisation of open-source software, according to a new ...

Sonatype, an end-to-end software supply-chain security firm, has appointed Bhagwat Swaroop as chief executive officer.

A new report out today from software supply chain security firm Sonatype Inc. details how the infamous North Korea-backed ...

A supply chain attack is one attack with multiple victims, with exponentially growing costs for the those within the supply chain as well as significant financial, operational and reputational risk ...