Hackers have stopped breaking in. They’re abusing the things developers already trust. (opens in new tab)

Hackers are not really breaking in any more. They are walking through doors we hold open for them. This past week made the shift plain. Two campaigns showed that the things developers trust most, open-source code and AI tools, have become the easiest way to attack them. 1,000 poisoned packages The first is a group […] at The Next Web