A practical checklist for evaluating npm packages (supply chain attacks, slopsquatting, etc.)

EU CRA mandatory vulnerability reporting enters into force September 11, 2026 — what the 24-hour obligation requires

Interesting- What LLM vuln research looks like

Using AI to Secure Its Generated Code Is a Ponzi Scheme

Digital Trap: Iran Uses Selective Internet Restoration to Track and Arrest January Protesters

OffensiveCon26 YouTube Playlist released

I evaluated 5 LLM agents on patching real-world CVEs. Here is what I found.