sigstore
PulseAugur coverage of sigstore — every cluster mentioning sigstore across labs, papers, and developer communities, ranked by signal.
1 day(s) with sentiment data
-
MCP servers vulnerable to npm and PyPI supply chain attacks
Supply chain attacks targeting Node Package Manager (npm) and Python Package Index (PyPI) dependencies pose a significant risk to Machine Control Processes (MCP) servers. These servers often store sensitive information …
-
MCP security scanner fixes critical bugs in package verification and threat detection
A security scanner for MCP servers, yunaremaia/mcp-guard, had three pull requests merged that addressed critical bugs. One PR fixed a feature that incorrectly returned 404 errors for all packages, preventing it from ver…
-
AliceLabs launches Universal Trust Adapter for AI agent security
AliceLabs has developed the Universal Trust Adapter (UTA), an open-source system designed to verify the trustworthiness of AI agents. UTA functions as a universal interface, supporting eight different credential formats…
-
AI Agent Servers Face Supply Chain Risks Similar to npm
A security audit of 8,764 AI agent servers revealed significant supply chain risks, mirroring vulnerabilities found in the Node Package Manager (npm) ecosystem. Researchers discovered instances of servers leaking sensit…
-
OpenAI Daybreak accelerates vulnerability patching with new AI tools
OpenAI is enhancing its Daybreak platform with new tools and models to accelerate the discovery and patching of software vulnerabilities. These advancements enable AI models to identify and generate fixes for critical s…
-
Tinfoil launches cloud AI service with verifiable privacy using secure enclaves
Tinfoil, a startup founded by researchers from MIT and Cloudflare, has launched a new service designed to provide verifiable privacy for AI workloads hosted in the cloud. The platform utilizes secure enclave technology,…