Graphalgo campaign moves upstream into infrastructure as code
First reported by ReversingLabs in February, the malware has moved to Terraform providers and Go modules. Here’s what you need to know.
John P. Mello Jr.
Freelance technology writer. John's work has appeared in the The Boston Globe and Boston Herald, as well as CFO, CIO, CSO, and Inc. magazines. He is a former managing editor of the Boston Business Journal and Boston Phoenix, as well as a staff writer for Government Security News.
Posts from John P. Mello Jr.
Graphalgo campaign moves upstream into infrastructure as code
AI coding agents expose developer screenshots on GitHub repos
PixelLeak exposures included many sensitive documents, highlighting why inventories of what agents can reach and publish are needed.
Dependency installation security measure already defeated on npm
New btree malware bypasses the install script, negating the popular repo's measure barely two months after adoption.
Why the smartest LLMs are not-so-smart pen testers
A new benchmark of eight leading AI systems shows that an intelligent model still needs a good context-rich harness.
Memory-safe programming goes from advocacy to adoption
The coding languages shift — fueled by Microsoft, Google, and Amazon and enabled by AI coding — is driven by the quest for secure software.
OpenAI: Hugging Face mob agent incident is 'a warning shot'
The post-mortem reaches sobering conclusions, and demands a plan of action for the AI industry — plus your SecOps strategy.
AI summary attack conceals code that tampers with LLMs
Research confirms email summary design flaws — and that any unverified content is an attack vector, so invest in threat intel.
Shai-Hulud worm arrests: Why this is not the end
The TeamPCP actors, alleged to be behind one of the most active supply chain threats, were arrested — but this is not the end of Shai-Hulud.
Agentic AI scales semiautonomous server attacks
UAT-10147 leveraged agentic AI to go beyond scripting to deliver a backdoor. The method highlights the need for agentic SOCs.