Third-party code

The pressure is on to take software transparency seriously.

Cloud attacks and SaaS supply chains converge as monoculture, AI and outages amplify risk.

SecurityWeek reports that widely used Windows text and code editing software EmEditor has been compromised in a supply chain intrusion that enabled information-stealing malware deployment.

OWASP Top 10 flags agentic AI risks — tool abuse, rogue agents, backdoored coding assistants.

While 95% of companies say they generate code via AI, less than 25% evaluate it for security.

Almost $7M stolen in Trust Wallet Chrome extension hack Multi-chain non-custodial cryptocurrency wallet Trust Wallet has disclosed the theft of almost $7 million worth of digital assets following the compromise of version 2.68 of its Google Chrome extension, which has nearly a million users, reports The Hacker News.

Widely used agentic AI framework and app dependency langchain-core has been impacted with the critical LangGrinch vulnerability, tracked as CVE-2025-68664, which could be leveraged to facilitate secret exfiltration and remote code execution, according to SiliconANGLE.

Tools such as Nezha evade signature detection, blend with normal activity, and reduce development effort.