OpenAI has rotated code-signing certificates after code repositories containing them were compromised in the TanStack supply ...

Mini Shai-Hulud hit 2 OpenAI devices via TanStack, exposing limited credentials and forcing macOS certificate updates by June ...

Researchers demonstrate how attackers can weaponize trusted repositories to hijack AI coding assistants and compromise ...

What happened OpenAI has urged macOS users to update their applications by June 12, 2026, after a supply chain attack compromised the signing certificates the company uses to authenticate its software ...

The software supply chain is the new ground zero for enterprise cyber risk. Don't get caught short - SiliconANGLE ...

A team of security researchers chained two vulnerabilities in LiteLLM, the popular open-source proxy that routes enterprise ...

OpenAI said it found no evidence that user data was accessed after a supply-chain attack involving the TanStack npm library.

OpenAI says Mac users must update ChatGPT, Codex, and Atlas apps by June 12 after an npm supply-chain attack exposed signing ...

According to Palantir Technologies, “SaaS is dead.” This is especially true for off-the-shelf supply chain software. SaaS is ...

Trivy is an open source vulnerability scanner maintained by Aqua Security. On March 16, TeamPCP injected credential-stealing ...

Hackers trojanized installers for the DAEMON Tools software and since April 8, delivered a backdoor to thousands of systems ...

Pi Network launches Pi App Studio, enabling AI-powered app creation and distribution across its 60-million-user blockchain ...