Chart of the Week

AI Skills Are Becoming the Swiss Army Knife of Attack: One Malicious AI Skill. 9+ Attack Categories.

AI skills may look like simple extensions to an agent. Lineaje research shows malicious ones can behave more like multi-purpose attack tools.

September 2, 2026

August 28, 2026

The State of AI Compliance Coverage

August 28, 2026

August 18, 2026

4 Ways AI Breaks the Traditional Security Model

August 18, 2026

August 13, 2026

When AI Is Breached, Access Control Is the Blind Spot

August 13, 2026

100% of Evaluations Revealed Novel Vulnerabilities

August 5, 2026

Does Autonomous Frontier-Model Driven Vulnerability Detection & Elimination Work at Scale?

July 29, 2026

SBOM: The Ingredient Label for Modern Software

July 14, 2026

Your Biggest Developer Isn't on Payroll

July 7, 2026

Open-Source Ages Like Milk, Not Wine.

June 30, 2026

The Trojan Horse in Your Dependency Chain

June 23, 2026

Open Source Origins: Mapping the Modern Software Supply Chain

June 16, 2026

Suspicious & Silent AI Attackers

June 11 2026

The Hidden Risks Inside AI Skill Marketplaces

June 3 2026

Silent AI attackers, are they already in your environment?

May 19, 2026

JAN 2025: VOLUME 1

Do you know the provenance of your open-source software?

JAN 2025: VOLUME 1

DEC 2024: VOLUME 1

How much “Shadow Code” is in your open-source applications?

DEC 2024: VOLUME 1

MAY 2024: VOLUME 1

Unknown Authors Contributed to Open-Source Components in Your Software!

MAY 2024: VOLUME 1

APR 2024: VOLUME 2

Data-centric Network Access Backdoors are embedded in Open-Source Software!

APR 2024: VOLUME 2

APR 2024: VOLUME 1

XZ is a wakeup call – 5.3% of Open–Source components are pre-tampered!

APR 2024: VOLUME 1

MAR 2024: VOLUME 3

Open-source software: Ten times the innovation, ten times the risk!

MAR 2024: VOLUME 3

MAR 2024: VOLUME 2

Where do your “critical” open-source dependencies come from?

MAR 2024: VOLUME 2

MAR 2024: VOLUME 1

Open-source software ages badly!

MAR 2024: VOLUME 1

FEB 2024: VOLUME 3

Poisoned Software Supply Chains

FEB 2024: VOLUME 3

FEB 2024: VOLUME 2

A third of your Open-Source Software are not fully attestable and that should worry you – a lot!

FEB 2024: VOLUME 2

FEB 2024: VOLUME 1

Are your Open-Source dependencies POISONED?

FEB 2024: VOLUME 1

JAN 2024: VOLUME 2

Open Source Software Charts: OSS risk is determined more by the quality of its dependencies than by the quality of its developers!

JAN 2024: VOLUME 2

JAN 2024: VOLUME 1

82% of Open-Source components are inherently risky

JAN 2024: VOLUME 1

DEC 2023: VOLUME 1

A Positive Revelation with Open Source Software!

DEC 2023: VOLUME 1

NOV 2023: VOLUME 2

90% of software components in Open-Source are transitive, invisible dependencies

NOV 2023: VOLUME 2

NOV 2023: VOLUME 1

Every Open-Source dependency is a software supply chain by itself!

NOV 2023: VOLUME 1

OCT 2023: VOLUME 4

Unearthing the Hidden Risks: Critical Inherent Risk Scores in Open-Source Components

OCT 2023: VOLUME 4

OCT 2023: VOLUME 3

Packages are reused 2.7 times on average within the same Open-Source Project

OCT 2023: VOLUME 3

OCT 2023: VOLUME 1

Vulnerabilities by Dependency Level in Open-Source Projects

OCT 2023: VOLUME 1

OCT 2023: VOLUME 2

Fixed vs Unfixed Vulnerabilities Distribution in Open-Source Software

OCT 2023: VOLUME 2

SEPT 2023: VOLUME 1

What’s in your open-source software?

SEPT 2023: VOLUME 1