Ray: Open-Source Distributed Computing Framework
Ray is a Python-native distributed computing framework for scaling AI and ML workloads. It is affected by CVE-2025-62593, a critical RCE vulnerability…
Tag: Open Source
Trivy Scanner Compromised in Supply Chain Attack
Trivy, an open-source security scanner, was compromised in March 2026. Credentials stolen from Trivy were used to compromise Checkmarx KICS actions.
Open Source’s Coming of Age: The Rise of the ‘Subset’ and the New Enterprise Security Bar
Open source software is undergoing a forced maturation, driven by a convergence of threats and regulatory pressures. The article argues that while…
EmeritOSS: A Retirement Home for Open Source Projects
EmeritOSS is a concept introduced in the article as a 'retirement home' for open source projects whose maintainers are no longer able…
HTTP Terminator: AI-Powered HTTP Desync Research Tool
HTTP Terminator is an open-source AI-assisted research system built by James Kettle at PortSwigger. It generated 30,000 candidate attack vectors from RFC…
TeamPCP Linked to Redis Attacks Dating Back to 2020 and Later Supply Chain Campaign
A new analysis by Oligo Security has uncovered that the threat actor known as TeamPCP has been active in the cybercrime scene…
TeamPCP: Cybercrime Group Behind Major Supply Chain Attacks
TeamPCP is a cybercrime group alleged to have compromised open-source projects like Trivy, Checkmarx KICS, and LiteLLM in March 2026. The group…
Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports
Two critical vulnerabilities in Paperclip, an open-source control plane for AI agents, could allow attackers to execute arbitrary commands on a server…
Hugging Face Diffusers Library
Diffusers is a Python library for state-of-the-art pretrained diffusion models used to generate videos, images, and audio. It is widely downloaded and…
Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet
Amazon Threat Intelligence has attributed the September 2025 hijack of the popular npm packages debug and chalk to North Korea's Sapphire Sleet…