X-Industry

Security practitioners face twin pressures as artificial intelligence enters everyday penetration testing.  Teams use AI to discover weaknesses faster while also checking the AI systems their organizations introduce.  New findings from Pentest-Tools.com show demand already outstrips capacity for most groups.  Nearly nine out of ten practitioners who have generated findings with AI report that the results need substantial manual checking.[1]

Among 147 respondents who had used such tools, 87.8% sa

Attackers are beginning to hide malicious activity inside trusted AI coding assistants and CI pipelines, mimicking routine developer and automation behavior so closely that some attack techniques can evade current detection tools entirely.  One early manifestation of the emerging threat is Sandworm_Mode, a self-propagating worm that spreads through malicious npm packages.  Researchers at Socket Security who discovered the threat earlier this year have described it as a Shai-Hulud-style worm that

Many malware attacks against open-source software components have compromised thousands of software packages and repositories, but the practical damage these attacks have caused organizations is harder to quantify.  The longer-term and indirect costs of these attacks may prove most significant for organizations.  Open-source components and software have long been a well-established source of threat activity. The widespread use, combined with the broad variance in how well-supported different pro