Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector

Phantom Squatting Uses AI-Hallucinated Domains for Phishing and Malware

AI Hallucinations as Legal Defense: The Accountability Gap in Corporate AI Use

The article examines the emerging legal and accountability challenge of AI hallucinations being used as a defense in corporate settings. It

LLM Agents Can Autonomously Hack Salesforce Experience Cloud Sites, Research Shows

Reco's research demonstrates that AI-powered LLM agents can autonomously hack Salesforce Experience Cloud sites by mapping attack surfaces,

Understanding Slopsquatting: Exploiting LLM Hallucinations for Fake Software Packages

Slopsquatting is a form of cybersquatting where individuals register fake software package names that large language models (LLMs) might hal

Supply Chain Attacks on Open-Source Software: Case Study of Malicious Pull Request Attempts

The article discusses recent supply chain attacks on open-source software projects like LiteLLM and axios, with a specific case study of att

Glassworm Threat Actor Returns with Unicode-Based Supply Chain Attacks on GitHub, npm, and VS Code

The Glassworm threat actor has returned with a new wave of supply chain attacks using invisible Unicode characters to compromise software re