AI-hallucinated code dependencies become new supply chain risk

Published on April 12, 2025

A new class of supply chain attacks named 'slopsquatting' has emerged from the increased use of generative AI tools for coding and the model's tendency to "hallucinate" non-existent package names. [...]

Continue reading on website
Other news

Microsoft Defender will isolate undiscovered endpoints to block attacks

April 11, 2025
Microsoft is testing a new Defender for Endpoint capability that will block traffic to and from undiscovered endpoints to thwart attackers' lateral network movement attempts. [...]

Tycoon2FA phishing kit targets Microsoft 365 with new tricks

April 12, 2025
Phishing-as-a-service (PhaaS) platform Tycoon2FA, known for bypassing multi-factor authentication on Microsoft 365 and Gmail accounts, has received updates that improve its stealth and evasion capabilities. [...]