Google Mandates Android Developer Verification by Sept 30, 2026 in Four Countries
Google has announced that starting September 30, 2026, certified Android devices in Brazil, Indonesia, Singapore, and Thailand will block normal installations of…
Tag: Open Source
Dify Open-Source Agentic Workflow Platform
Dify is an open-source agentic workflow platform with over 146,000 GitHub stars. It was found to have multiple vulnerabilities (DifyTap) allowing cross-tenant…
Fake AI Agent Skill Bypasses Security Scans, Reaches 26,000 Agents in Supply Chain Attack Demo
Security firm AIR demonstrated a critical supply chain vulnerability in AI agent ecosystems by creating a fake skill named 'brand-landingpage' that bypassed…
Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks
Cybersecurity researchers at Novee Security have identified a critical exploitable pattern in CI/CD workflows, codenamed Cordyceps, that allows unauthenticated attackers to hijack…