Heisenberg is an open-source tool that checks the health of a software supply chain. It analyzes dependencies using data from deps.dev, Software Bills...

A new open-source tool called PDF Object Hashing is designed to detect malicious PDFs by analyzing their structural “fingerprints.” Released by...

Supply chain security company Safety has discovered a trojan in NPM that masqueraded as Anthropic's popular Claude Code AI software development...

Supply chain security company Safety has discovered a trojan in NPM that masqueraded as Anthropic's popular Claude Code AI software development...

Proximity is a new open-source tool that scans Model Context Protocol (MCP) servers. It identifies the prompts, tools, and resources that a server...

Attackers are using the open-source red-team tool RedTiger to build an infostealer that collects Discord account data and payment information. [...]

Attackers are using the open-source red-team tool RedTiger to build an infostealer that collects Discord account data and payment information. [...]

Keeping older software versions secure often means backporting patches from newer releases. It is a routine but tedious job, especially for large...

Keeping older software versions secure often means backporting patches from newer releases. It is a routine but tedious job, especially for large...

This month’s roundup features exceptional open-source cybersecurity tools that are gaining attention for strengthening security across various...