DevSecOps | CSO Online

CyberStrikeAI lowers the barrier to complex cyberattacks by combining AI orchestration, MCP integration, and more than 100 offensive tools into a single, public GitHub repository.

By Taryn Plumb

Mar 3, 2026 5 mins

CyberattacksCybercrimeOpen Source

‘Silent’ Google API key change exposed Gemini AI data

Billing ID keys were turned into Gemini authentication credentials without informing developers.

By John E. Dunn

Feb 27, 2026 4 mins

APIsAccess ControlAuthentication

The CSO guide to top security conferences

CSO Online’s calendar of upcoming security conferences makes it easy to find the events that matter the most to you.

By CSO Staff

Feb 27, 2026 3 mins

C-SuiteCSO and CISOEvents

Software risk is business risk—now is the time for C-Suite to act

While software introduces new ways of doing business, it can also introduce serious new risks. When it comes to digital transformation, don’t let inherit risks stand in the way of the competitive advantage your business seeks.

By Jason Schmitt, General Manager, Synopsys Software Integrity Group

Mar 13, 2023 4 mins

DevopsSoftware Development

Anthropic’s Claude Code Security rollout is an industry wakeup call

When Anthropic announced the start of testing on Friday, security vendors, and the markets, sat up and took notice. But is the panic warranted?

By Evan Schuman

Feb 24, 2026 9 mins

Artificial IntelligenceCode SecuritySecurity

Compromised npm package silently installs OpenClaw on developer machines

While the AI itself wasn’t weaponized, the technique raises concerns about AI agents with broad system access.

By Taryn Plumb

Feb 20, 2026 5 mins

Artificial IntelligenceOpen SourceVulnerabilities

Notepad++ author says fixes make update mechanism ‘effectively unexploitable’

Hardening had to be done after a threat actor compromised updates with a custom backdoor.

By Howard Solomon

Feb 18, 2026 5 mins

CybercrimeDevopsSoftware Deployment

Open source maintainers being targeted by AI agent as part of ‘reputation farming’

AI agent OSS activity opens the door to future supply chain attacks, says security company.

By John E. Dunn

Feb 16, 2026 4 mins

Artificial IntelligenceOpen SourceRisk Management

Researchers unearth 30-year-old vulnerability in libpng library

The widely used open-source library has been patched to defend against a heap buffer overflow flaw that’s been in the code since its inception.

By John Leyden

Feb 13, 2026 3 mins

Open SourceSecurityVulnerabilities

Battling bots face off in cybersecurity arena

Wiz creates an environment to test AI agents’ ability to identify cybersecurity problems.

By Maxwell Cooter

Feb 13, 2026 2 mins

APIsCloud SecurityZero-Day Vulnerabilities

Software developers: Prime cyber targets and a rising risk vector for CISOs

From technical compromise to AI-driven attacks, cyber criminals increasingly see software developers as prime targets, creating systemic risks CISOs must address.

By John Leyden

Feb 9, 2026 9 mins

Application SecurityDevSecOpsSecurity