Brief

Perplexity has open-sourced Bumblebee, a new tool designed to scan developer endpoints for potential supply-chain attack vectors. This read-only scanner inventories installed packages, AI agent configurations, and editor/browser extensions on macOS and Linux systems. Bumblebee aims to fill a gap left by existing security tools by directly inspecting local developer machine states, which are increasingly targeted by attackers. AI

Microsoft has reversed its stance on a password vulnerability in its Edge browser, now planning to update all supported versions. Initially, the company stated that saved passwords loading into memory in plaintext at startup was by design. However, following public disclosure and likely media pressure, Microsoft will implement a change to prevent passwords from being loaded into memory upon startup, prioritizing this update. AI