Microsoft’s open source tools were hacked to steal passwords of AI developers

According to security firm Cloudsmith and community-driven malware analysis site OpenSourceMalware, which were some of the ...

For the 2nd time in weeks, Microsoft packages laced with credential stealer

Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI ...
SecurityWeek

OWASP Incubator Project Helps Developers Find and Fix Vulnerable Dependencies in Seconds

CVE Lite CLI helps developers quickly identify and fix vulnerable npm dependencies during development, reducing delays and ...
Dark Reading

Rust-Written IronWorm Hits NPM Supply Chain

A newly discovered malware campaign targeting the open source software ecosystem underscores how rapidly supply chain threats are evolving. The campaign, which JFrog has dubbed "IronWorm," targets ...
MUO on MSN

5 open-source apps that are so good you'll never need to pay for them

Five free apps that actually replace paid ones.
CNX Software

Privacy-focused, open-source Raspberry Pi Zero 2W DIY security camera offers end-to-end encryption, on-device AI

Secluso is a private, open-source, DIY home security camera system built around the Raspberry Pi Zero 2 W, featuring true end-to-end encryption (E2EE) and ...
Ars Technica

Texas AG sues Meta over claims that WhatsApp doesn’t provide end-to-end encryption

The Texas Attorney General has sued Meta over allegations that the company’s WhatsApp messenger, used by more than 3 billion people, doesn’t provide the end-to-end encryption (E2EE) it has long ...
KXAN

Paxton sues Meta over alleged false privacy claims

AUSTIN (KXAN) – Texas Attorney General Ken Paxton has filed a lawsuit against Meta Platforms Inc. and WhatsApp LLC, alleging the companies misled Texans about the privacy of messages sent through the ...
9to5Mac

Discord now uses end-to-end encryption for all voice and video calls by default

Discord is now using end-to-end encryption for all voice and video calls across all platforms: desktop, mobile, web and console. It’s been a very long time coming – the company first shared its ...
The Record

Discord migrates all users to end-to-end encryption by default

The social and messaging platform Discord announced Tuesday that video and voice messages sent through the service will be end-to-end encrypted with no opt-in required. The move comes as other major ...
The Next Web

Discord now encrypts every voice and video call by default, and not even it can listen in

Discord has enabled end-to-end encryption for all voice and video calls by default, using its open-source DAVE protocol. The move means not even Discord can access call content, making it a major ...
Bleeping Computer

Discord rolls out end-to-end encryption on voice, video calls

Discord announced that all voice and video calls through the communication platform are now protected by default with end-to-end encryption (E2EE). The implementation was completed in March. Extensive ...