Coinbase says Trump’s SEC has ended its enforcement case against the crypto company

Coinbase says that the SEC has agreed to end an enforcement case that accused it of illegally running an unregistered securities exchange. This could signal a major change in how the US government wil [...]

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and au [...]

Vercel breach exposes the OAuth gap most security teams cannot detect, scope or contain

One employee at Vercel adopted an AI tool. One employee at that AI vendor got hit with an infostealer. That combination created a walk-in path to Vercel’s production environments through an OAuth gr [...]

Extortionists bribed Coinbase employees to give them customer data

Coinbase has been betrayed from within. The cryptocurrency exchange said that cyber criminals bribed some of its support agents to share personal information about Coinbase customers. Attackers acquir [...]

Protect your enterprise now from the Shai-Hulud worm and npm vulnerability in 6 actionable steps

Any development environment that installed or imported one of the 172 compromised npm or PyPI packages published since May 11 should be treated as potentially compromised. On affected developer workst [...]

Discord users' IDs and data compromised in customer service provider hack

One of Discord's third-party customer service providers has been infiltrated by an unauthorized party who was able to gain access to users' information. Discord said it recently discovered t [...]

Netomi raises $110 million as Accenture and Adobe bet on AI for customer service

Netomi, the San Francisco-based startup building AI systems for enterprise customer service, said Thursday that it has raised $110 million in new funding in a round led by Accenture Ventures, with par [...]

Resolve AI says the AI coding boom is breaking production systems. It wants to fix that.

Resolve AI, the production-operations startup backed by Greylock and Lightspeed Venture Partners, today announced a sweeping expansion of its platform that introduces always-on background agents, a re [...]

Four AI supply-chain attacks in 50 days exposed the release pipeline red teams aren't covering

Four supply-chain incidents hit OpenAI, Anthropic and Meta in 50 days: three adversary-driven attacks and one self-inflicted packaging failure. None targeted the model, and all four exposed the same g [...]