Information Security Buzz: Commercial Software’s Seven Deadly Sins

AI coding is a big security problem when most security teams are still relying on tools designed for a world where human-written code remains prevalent.

As package registries find better ways to combat cyberattacks, threat actors are finding other methods for spreading their malware to developers.

ReversingLabs' analysis of ethers-provider2 has revealed that it's nothing but a trojanized version of the widely-used ssh2 npm package