Decrypt

Shai-Hulud: What to Know About the Malware Spreading Through Software Pipelines

The Shai-Hulud supply-chain malware campaign is exploiting the automated systems developers trust to publish software safely.

Max-severity flaw in ChromaDB for AI apps allows server hijacking

A max-severity vulnerability in the latest Python FastAPI version of the ChromaDB project allows unauthenticated attackers to ...

A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale

GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks that has ...

Uncovering coded antisemitism online takes both human expertise and AI automation

Tracking hate speech online is challenging even when terms are explicit. Coded speech is harder to detect – but pairing AI ...

AI is turbocharging “wizards” on 4Chan who take orders to nudify images of women

A new ISD analysis and WIRED reporting show how 4chan users are turning nonconsensual AI nudes into a repeatable system built ...