How Claude Planted Malicious Code In A Crypto-Trading App

April 28, 2026
Paul Roberts
A malicious campaign by North Korean state actors saw a malicious npm package dependency slipped into a crypto trading agent by an AI coding agent, according to a new report by ReversingLabs. The incident highlights a troubling new frontier in software supply chain attacks: hackers targeting developers…and the AI tools writing their code.

Exposed Developer Secrets Surge: AI Drives 34% Increase in 2025

March 17, 2026
Paul Roberts
GitGuardian’s latest Secrets Sprawl report found more than 28 million new secrets exposed via public GitHub commits in 2025, a 34% increase over 2024 and the largest annual jump the company has recorded. The spike reflects a broader transformation in software creation, as AI tools lower the barrier to coding.

When Cybersecurity Breaks Mobility: The Hidden Risks of Software-Powered Wheelchairs

February 2, 2026
Paul Roberts
Can a remote software attack send a power wheelchair tumbling down a staircase? Sadly: the answer is “yes.” Check out our latest podcast interview with Billy Rios and Brandon Rothel of QED Secure Solutions. Billy and Brandon discuss their research into security flaws in power wheelchairs by the Japanese firm WHILL.

Technology’s “Upside Down”? Software Supply Chain

January 28, 2026
Paul Roberts
Stranger Things concept of the “Upside Down” is a useful way to think about the risks lurking in the software we all rely on. A new report from ReversingLabs shines a light into that dark world.

AI Surveillance: Unmasking Flock Safety’s Insecurities

December 29, 2025
Paul Roberts
Security researcher Jon “Gainsec” Gaines and YouTuber Benn Jordan discuss their examination of Flock Safety’s AI-powered license plate readers and how cost-driven design choices, outdated software, and weak security controls expose them to abuse.