PyPI domain resurrection fix: Why it matters
With attacks on popular repositories on the rise, PyPI has moved to head off a common technique for duping developers. Here’s what it accomplishes — and where there’s room for improvement.
Jaikumar Vijayan
Freelance technology journalist. A former Senior Editor of Computerworld, Jai is a journalist and technology content writing specialist, with 20+ years of award-winning experience in IT trade journalism. He is a correspondent for the Christian Science Monitor and a contributor to Dark Reading, eWEEK, Datamation, IBM Security Intelligence, and Third Certainty. He writes features and covers breaking news stories on information security, data privacy, and big data/business analytics. His recent projects include ERP case studies and an e-book on enterprise mobility management best practices.
Posts from Jaikumar Vijayan
PyPI domain resurrection fix: Why it matters
Why AI coding security features are not enough
Integrated security in AI assistants could help to catch code flaws — but they are only one layer in a comprehensive AppSec strategy.
How to implement PaC for a more secure SDLC
Policy as Code is emerging as a key area of focus for AppSec teams in the age of cloud-native development. But implementation can be daunting.
AI security tools and hype: Report breaks down key considerations
The Latio AI Security Report highlights how marketing hype is creating confusion — and hurting security outcomes. Here are the top takeaways.
CISO's open letter on third-party software risk is a call to action
JPMorganChase's Pat Opet has raised a red flag. Learn why — and how SaaSBOMs can help your organization get a handle on risk.
Detection as code: How to enhance your real-time threat detection
DaC can bolster the speed, accuracy, and scalability of your threat detection. Here are five essential steps to getting started.
SaaS risk is on the rise: 7 action items for better management
The rapid rise of SaaS apps has spawned new risks. One new hopeful stands out: The SaaSBOM. Here are key steps that help rein them in.
Secrets leaks increase — and expand beyond the codebase
Leaks from GitHub and other repos are up, but collaboration tools such as Slack and Jira are now a major threat — and a serious blind spot.
AI coding tools weaponized: What your AppSec team needs to know
The Rules File Backdoor attack method is pernicious — and one that can be easily exploited with the rise of 'vibe coding' and agentic AI.