Search: “slsa”

32 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 28 Malware 11 Exploit / PoC 6 Policy & legal 6 Data breach 3 Industry 3 AI tools & infra 2 AI safety & security 1 Threat actor 1 Tools 1

SeverityAll critical 24 high 32 medium 2 low 1 info 3

Google Releases New Framework to Prevent Software Supply Chain Attacks

The Hacker NewsJun 18, 10:19 UTC · Jun 18, 2021Data breach

57

Google Spices Up Supply Chain Security with SLSA Framework

Infosecurity MagazineJun 18, 10:32 UTC · Jun 18, 2021Industry

42

GitLab enhances Security and Governance solution to strengthen software supply chain security

Help Net SecurityOct 27, 00:00 UTC · Oct 27, 2022Vulnerability

42

Miasma Worm Compromises 73 Microsoft GitHub Repositories

Security AffairsJun 9, 16:08 UTC · Jun 9, 2026Malware1

42

Three Ways To Supercharge Your Software Supply Chain Security

The Hacker NewsJan 4, 12:13 UTC · Jan 4, 2024Vulnerability1

42

Google Expands Its Bug Bounty Program to Tackle Artificial Intelligence Threats

The Hacker NewsOct 27, 14:38 UTC · Oct 27, 2023Vulnerability

42

Chalk: Open-source software security and infrastructure visibility tool

Help Net SecurityOct 3, 00:00 UTC · Oct 3, 2023Tools

42

Google Launches OSV-Scanner Tool to Identify Open Source Vulnerabilities

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2022Vulnerability

42

Google Unveils Open Source Project to Improve Software Supply Chain Security

Infosecurity MagazineOct 21, 17:00 UTC · Oct 21, 2022Exploit / PoC

57

GUAC - A Google Open Source Project to secure software supply chain

Security AffairsOct 21, 10:15 UTC · Oct 21, 2022Exploit / PoC

57

Chainloop: Open-source evidence store and policy engine for the software supply chain

Help Net SecurityAug 10, 00:00 UTC · Aug 10, 2026Policy & legal

42

Cybersecurity jobs available right now: March 24, 2026

Help Net SecurityAug 6, 12:19 UTC · Aug 6, 2026Vulnerability1

42

Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks

The Hacker NewsAug 4, 15:03 UTC · Aug 4, 2026Malware1

42

Compromised AsyncAPI npm Packages Deliver Multi

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2026Exploit / PoC1

57

145 Mastra npm Packages Compromised via Hijacked Contributor Account

The Hacker NewsJun 22, 05:41 UTC · Jun 22, 2026Malware

42

For the 2nd time in weeks, Microsoft packages laced with credential stealer

Ars Technica · SecurityJun 8, 18:34 UTC · Jun 8, 2026Malware

42

IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks

The Hacker NewsJun 6, 06:23 UTC · Jun 6, 2026Data breach

57

Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer

The Hacker NewsMay 25, 09:00 UTC · May 25, 2026Malware1

42

Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account

The Hacker NewsMay 21, 05:56 UTC · May 21, 2026Malware

42

OpenAI hit by supply chain attack linked to malicious TanStack packages

Security AffairsMay 16, 09:31 UTC · May 16, 2026Malware

42

Chainguard Libraries for JavaScript provides developers with malware-free dependencies

Help Net SecuritySep 25, 00:00 UTC · Sep 25, 2025Malware

42

Google Launches OSS Rebuild to Expose Malicious Code in Widely Used Open

The Hacker NewsJul 23, 09:28 UTC · Jul 23, 2025Vulnerability

42

Google expands bug bounty program to cover AI-related threats

Help Net SecurityOct 30, 00:00 UTC · Oct 30, 2023Vulnerability

42

Google Launches Framework to Secure Generative AI

Infosecurity MagazineJun 9, 12:00 UTC · Jun 9, 2023Vulnerability

42

GUAC 0.1 Beta: Google's Breakthrough Framework for Secure Software Supply Chains

The Hacker NewsMay 25, 05:45 UTC · May 25, 2023Vulnerability

42

Scribe Security's evidence-based security trust hub validates software integrity

Help Net SecurityOct 26, 00:00 UTC · Oct 26, 2022Vulnerability

42

Codenotary Trustcenter v3.0 mitigates risks by sifting through billions of software artifacts

Help Net SecurityOct 21, 00:00 UTC · Oct 21, 2022Vulnerability

42

Google Launches GUAC Open Source Project to Secure Software Supply Chain

The Hacker NewsOct 20, 17:09 UTC · Oct 20, 2022Vulnerability

42

ActiveState Artifact Repository reduces the risk of securing Python supply chain

Help Net SecuritySep 21, 00:00 UTC · Sep 21, 2022Industry

42

Government guide for supply chain security: The good, the bad and the ugly

Help Net SecuritySep 6, 00:00 UTC · Sep 6, 2022Vulnerability

42

Codenotary SBOM Operator for Kubernetes provides continuously updated info on software supply chain

Help Net SecurityJun 29, 00:00 UTC · Jun 29, 2022Policy & legal

42

Here's a New Tool That Scans Open-Source Repositories for Malicious Packages

The Hacker NewsMay 3, 03:59 UTC · May 3, 2022Malware

42