DevGuard: Open-source vulnerability management for the software supply chain

DevGuard is a free, open source vulnerability management platform that collects a software project’s security findings in one place, ranks them by risk, and tracks them. It’s an OWASP Incubating Project, and anyone can self-host it. One com… Continue reading DevGuard: Open-source vulnerability management for the software supply chain→

DevGuard: Open-source vulnerability management for the software supply chain

DevGuard is a free, open source vulnerability management platform that collects a software project’s security findings in one place, ranks them by risk, and tracks them. It’s an OWASP Incubating Project, and anyone can self-host it. One com… Continue reading DevGuard: Open-source vulnerability management for the software supply chain→

Google open-sourced TorchTPU, so PyTorch on TPUs just got a lot easier

Google released TorchTPU as open source, giving PyTorch developers a native way to run models on the company’s Tensor Processing Units. Google also announced TPU support in the vLLM and SGLang serving engines, the TorchTitan training framework, Ray, an… Continue reading Google open-sourced TorchTPU, so PyTorch on TPUs just got a lot easier→

Chrome flags malicious commands that scammers pass off as fixes

Google is updating Chrome’s Enhanced Protection mode to detect scam websites and warn users when a page tricks them into copying a malicious command. The company introduced Enhanced Protection for Chrome’s Safe Browsing feature in 2020 to address onlin… Continue reading Chrome flags malicious commands that scammers pass off as fixes→

Microsoft wants to limit AI agents’ permissions when they stray from the job

Microsoft’s Guardian Agents in Project Perception adapt as agent activity, risk, security context and organizational policy change. They help security teams understand why risk changed, investigate relevant evidence, recommend or apply containment meas… Continue reading Microsoft wants to limit AI agents’ permissions when they stray from the job→

Your frontline workers have a workaround for that MFA prompt

Frontline workers in healthcare and manufacturing are getting around slow, unreliable logins by staying signed in, sharing credentials and trying to bypass multifactor authentication. Sapio Research surveyed 700 IT and security decision-makers in Augus… Continue reading Your frontline workers have a workaround for that MFA prompt→

Cloudflare bets you’re overpaying an LLM to read your invoices

Cloudflare released a preview of Clairic, an extraction model that pulls typed values out of messy text and images in one pass without generating tokens. In Cloudflare’s test on a damaged-product support claim, a pipeline built around Clairic finished … Continue reading Cloudflare bets you’re overpaying an LLM to read your invoices→

Cybercriminals favor Microsoft over Apple and Google in brand phishing attacks

Microsoft accounted for 33% of brand impersonation attempts tracked by Check Point Research in the third quarter of 2026, up from 23% in the previous quarter and roughly four times the share of any other brand. Top 10 most impersonated brands in phishi… Continue reading Cybercriminals favor Microsoft over Apple and Google in brand phishing attacks→

Bearer CLI: Free, source-available code security scanning tool (SAST)

Bearer CLI is a free static application security testing (SAST) tool that scans source code for vulnerabilities and prioritizes them by the sensitive data they touch. SAST means the tool reads code without running it. Organizations can use it freely, w… Continue reading Bearer CLI: Free, source-available code security scanning tool (SAST)→