Third-party code

Experts point out that Magecart attacks exploit third-party scripts on web browsers, bypassing traditional security controls.

The pressure is on to take software transparency seriously.

Cloud attacks and SaaS supply chains converge as monoculture, AI and outages amplify risk.

SecurityWeek reports that widely used Windows text and code editing software EmEditor has been compromised in a supply chain intrusion that enabled information-stealing malware deployment.

OWASP Top 10 flags agentic AI risks — tool abuse, rogue agents, backdoored coding assistants.

While 95% of companies say they generate code via AI, less than 25% evaluate it for security.

Almost $7M stolen in Trust Wallet Chrome extension hack Multi-chain non-custodial cryptocurrency wallet Trust Wallet has disclosed the theft of almost $7 million worth of digital assets following the compromise of version 2.68 of its Google Chrome extension, which has nearly a million users, reports The Hacker News.