Bloom Security’s Extension Resurrection research exposes a blind spot in developer security
Security teams have spent years scrutinizing software dependencies, package repositories and build pipelines. Bloom Security‘s latest research suggests that another part of the software supply chain deserves closer attention: the extensions developers install inside their IDEs. The company’s “Extension Resurrection” research examined extension packs on the Visual Studio Code Marketplace and Open VSX. Bloom found […]<br /> This story continues at The Next Web [...]
Rating
Innovation
Pricing
Technology
Usability
We have discovered similar tools to what you are looking for. Check out our suggestions for similar AI tools.
Running Claude Code or Claude in Chrome? Here's the audit matrix for every blind spot your security stack misses
Between May 6 and 7, four security research teams published findings about Anthropic’s Claude that most outlets covered as three separate stories. One involved a water utility in Mexico, another tar [...]
Google’s new Deep Research and Deep Research Max agents can search the web and your private data
Google on Monday unveiled the most significant upgrade to its autonomous research agent capabilities since the product's debut, launching two new agents — Deep Research and Deep Research Max [...]
GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK
GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and au [...]
Valid certificates, stolen accounts: how attackers broke npm's last trust signal
On May 19, 633 malicious npm package versions passed Sigstore provenance verification. They were cleared by the system because the attacker had generated valid signing certificates from a compromised [...]
Nimble claims its new, domain-specialized Web Search Agents cut token costs in half while boosting retrieval accuracy
Nimble, a New York City-based tech startup VentureBeat previously covered for its efforts to re-invent web search for enterprises by using multiple AI agents to improve accuracy and depth, is taking a [...]
Lost Records and Blue Prince are coming to the PlayStation Game Catalog at launch
The spiritual successor to Life is Strange is heading to the PlayStation Plus Game Catalog as a day-one freebie. The first installment of Don’t Nod’s Lost Records: Bloom & Rage hits Sony’s s [...]
Anthropic and OpenAI just exposed SAST's structural blind spot with free tools
OpenAI launched Codex Security on March 6, entering the application security market that Anthropic had disrupted 14 days earlier with Claude Code Security. Both scanners use LLM reasoning instead of p [...]
Amazon and Chobani adopt Strella's AI interviews for customer research as fast-growing startup raises $14M
One year after emerging from stealth, Strella has raised $14 million in Series A funding to expand its AI-powered customer research platform, the company announced Thursday. The round, led by Bessemer [...]