PolinRider: North Korea's Open Source Supply Chain Campaign and What It Means for Healthcare DevSecOps
A North Korean supply chain campaign has compromised 108 open source packages and 1,951 GitHub repositories since Decemb...
Read MoreVendor Risk Management
11 articles
Claude Code Desktop: A Security Evaluation for Healthcare DevSecOps Programs
Claude Code Desktop is the most capable AI-assisted development environment available in a desktop app today — and it sh...
Read MoreThe Mayo Clinic AI Governance Lawsuit: What the Eto Complaint Alleges and What It Means for Healthcare AI Programs
A former Mayo Clinic research director has filed a federal lawsuit alleging retaliation after raising AI compliance conc...
Read MoreWhat the Scatter Spider Arrest Reveals About Windows Telemetry and PHI Risk on Clinical Workstations
A Scatter Spider member was caught partly through Windows Telemetry data. The same default-enabled collection mechanisms...
Read MoreClaude Code's Hidden Fingerprint: A Security Analysis of the Steganographic Detection Mechanism
Anthropic's Claude Code was caught using steganographic Unicode encoding to silently fingerprint users routing through C...
Read MoreFable 5 Restored and the Jailbreak Severity Framework: Closing the Series, Opening the Governance Conversation
The 19-day Fable 5 suspension is over. But the more significant development is what emerged from it: a four-criteria jai...
Read MoreOne Phishing Email, Two Days, 1.4 Million Patients: The Xsolis Healthcare AI Breach
A single phishing email gave attackers a two-day window inside healthcare AI company Xsolis — long enough to expose 1.4 ...
Read MoreMythos 5 Partially Restored — US Government Authorizes Access for Critical Infrastructure Defenders
Fifteen days after the Commerce Department forced Anthropic to pull Mythos 5 and Fable 5 globally, the government has au...
Read MoreIs This Now US Government Frontier AI Policy? The OpenAI GPT-5.6 Restriction and What It Means
The White House asked OpenAI to limit GPT-5.6's release to approved partners — the first preemptive government restricti...
Read More