Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
LLM Tools Datasette 0.1.1: Transitive Dependency Breakage in LLM Plugins — Supply Chain Hardening Guide
On October 18, 2026, Simon Willison released llm-tools-datasette 0.1.1, a patch release fixing a breakage introduced when the core LLM CLI t...
Why Dependency Modernization in Security Tools Matters: Lessons from Malwarebytes' Engineering Overhaul
The Security Product Itself Is Part of Your Attack Surface Malwarebytes recently published a candid look inside its own engineering organiza...
llm 0.33 Dependency Overhaul: What Security Teams Must Verify Before Upgrading Simon Willison's LLM CLI
Introduction On August 22, 2026, Simon Willison shipped llm 0.33, a release of his widely adopted open-source CLI for interacting with large...
Defending Against HalluSquatting and Slopsquatting: Securing AI Pipelines from Late-Binding Attacks
Defending Against HalluSquatting and Slopsquatting: Securing AI Pipelines from Late-Binding Attacks Introduction The integration of AI codin...
Injective Labs GitHub Compromise: Detecting and Blocking Malicious npm Packages Targeting Crypto Wallets
Recently, the GitHub account of Injective Labs was compromised, leading to the publication of malicious npm packages designed to steal crypt...