Subscribe to the Kusari monthly newsletter
Sign UpThe Kusari Edge

February
2026
ICYMI: Noteworthy Headlines 🗞️
- Recent research has cast fresh doubt on a cornerstone assurance of modern password managers, that providers can’t view the contents of your vault.
- A compromised npm publishing token led to a brief but concerning software supply chain breach
- Sandworm_Mode has been identified - a new worm-like malware that targets the NPM registry is amplifying worries about software supply chain risks
Latest from Kusari

- Security programs that wait until the end of development drag down velocity and orgs then struggle with risk; says Kusari Co-Founder and CEO Tim Miller
- Despite all the tools, alerts and automation, most teams use reactive security practices - get the Kusari Research Report to learn what high-performing orgs do differently
- Kusari Co-Founder and CTO Michael Lieberman shares how the EU Cyber Resilience Act will expose gaps and force a rethink on security proof
Upcoming Events 📣
- March 22-26 | KubeCon Europe | Booth #1141 in the Start-Up Section
- Monday > See us at Platform Engineering Day
- Monday night > Register for our KubeCon Europe Kickoff Party
What’s up with GUAC? 🥑
- Open Source Initiative and AboutCode share ClearlyDefined cooperation — a move that aligns with the Graph for Understanding Artifact Composition (GUAC) project
- AI agents are targeting OSS maintainers with a new supply chain risk; counteract it with Kusari Inspector
- The Linux Foundation has a new report that quantifies the business value of open source contribution; ensure that value isn’t eroded by hidden risk, compliance gaps, or operational toil: work with secure OSS expert Kusari
Resource of the Month ⚒️
- Here's a nifty offering: hooks for terminal shells to protect against common attacks and mistakes
