a Futurum companyTag
5 articles
Blogs
Security researchers are sorting through a complex, stealthy, and fast-moving supply-chain attack aimed at pushing information-stealing malware by compromising the account of the maintainer of multiple Rust crates and introducing…
Showing 1–5 of 5
Blogs
Modern applications rely on open source components for up to 90% of their code, creating a vast attack surface dominated by inhemalicious supply chain injections. High-profile inci…
AI
Analysis arguing that AI-driven code generation accelerates dependency decisions and expands supply-chain risk, requiring shift-left governance, prompt-level controls, automated SB…
DevOps and Open Technologies
A group of more than two dozen malicious npm packages used to steal secrets and credentials from software developers has all the hallmarks – from infrastructure to operations – of…
Blogs
The attacker published at least seven malicious packages on the Go Module Mirror that, if installed, will deliver a backdoor.
