October, the online service for the open-source AI coding tool 'OpenCode' was attacked, resulting in the leak of OpenAI, ...
On October 13, 2026, the GitHub Changelog announced "Secret scanning blocks Anthropic keys by default, adds Salesforce." This ...
GitHub Copilot in VS Code now runs three coding agents side by side: GitHub’s own, Anthropic’s Claude and OpenAI’s Codex, ...
LiteLLM says hackers used GitHub tokens from its own logs to publish a poisoned release. Wiz cited 49,000 downloads and saw ...
GhostAction infected 790 GitHub repositories with malicious workflows, risking cloud credentials, publishing tokens, and AI ...
Railway urges users to rotate API keys and credentials after a cyberattack potentially exposed sensitive customer data.
Blacksmith GitHub Actions runner raised $66 million in a Sequoia-led Series C at a $1 billion valuation as AI coding agents ...
Railway disclosed a security breach. Researcher Taylor Monahan links about $371,000 in crypto theft across 19 chains to the ...
GhostAction operators add GitHub-themed phishing and a VS Code-triggered stealer to compromised repositories, with 94 ...
Security roundup: PHP2Shell, eMudhra certificate failures, Node.js security fixes and the LiteLLM supply-chain attack reshape ...
A viral post says DeepSeek's new model broke Chrome's V8 Sandbox in 12 hours, but no code, CVE, or independent verification ...
Enterprises can now manage their dependencies’ licenses at scale with sophisticated, ruleset-based checks that enforce a centralized policy. Open source license compliance is now generally available ...