A Booz Allen Hamilton study found that three of four Chinese AI coding models produced more vulnerable code when prompts identified the user as a U.S. government developer, with Qwen3-Coder showing a 130% increase in vulnerabilities. The report raises urgent questions about AI supply chain security.
Researchers ran static analysis tools on 658 leaked malware projects and found nearly 90% contained recognizable code weaknesses — including disabled TLS validation and shared vulnerable code fragments that defenders could exploit across multiple threat families.
Broadcom released its largest-ever Spring security update and is using AI to hunt vulnerabilities across 100,000+ dependency builds — but zero-day patches are locked behind its enterprise paywall.
A French appeals court ordered Caisse d’Épargne to refund a spoofing scam victim, rejecting the bank’s negligence defense — a ruling that strengthens consumer fraud protections.
A French court has ruled in favor of a spoofing scam victim who was denied reimbursement by his bank, establishing that deceived customers aren’t negligent just because criminals exploited their bank’s own identity to trick them.
A Bordeaux court ordered Caisse d’Épargne to reimburse a spoofing victim, rejecting the bank’s argument that the customer was negligent. The ruling sets a precedent for bank fraud cases across France.
A French court ordered Caisse d’Épargne to refund a spoofing scam victim after the bank blamed him for falling for the fraud. The ruling reinforces that banks can’t easily dodge reimbursement by claiming customer negligence.
A French court ordered Caisse d’Épargne to reimburse a customer scammed by a fake bank advisor, rejecting the bank’s claim that the victim was negligent.
A French court ordered Caisse d’Épargne to reimburse a customer who lost €5,900 to a fake advisor scam, rejecting the bank’s claim that the victim was grossly negligent.
A new malware called IronWorm is spreading through npm by poisoning legitimate packages with a Rust-based stealer that uses stolen credentials to self-replicate. It deploys an eBPF rootkit and targets AI development credentials, making it one of the more sophisticated supply chain attacks in recent memory.
