Attackers abuse compromised GitHub repos and hosted runners to target cPanel and WHM via CVE-2026-41940, using 583 workflows ...

Microsoft's latest weekly VS Code release advances shared agent sessions, multi-file change review, chat visibility and terminal navigation ...

Mend.io’s research team caught this campaign before most of the open source community ever saw it. Continuous monitoring of RubyGems flagged a batch of gems that looked, at a glance, like an ordinary ...

GitHub Code Quality billing starts today as the free preview ends, with immediate $10-per-active-committer monthly charges ...

Ben O'Mahony discusses building custom AI-powered Language Server Protocols (LSPs) that go beyond standard rule-based ...

X open source codebase pledge: Elon Musk announced X will publish its entire codebase after a security vulnerability review ...

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...

Grok Build CLI uploaded entire developer Git repositories — committed secrets included — to a Google Cloud Storage bucket ...

Multiple threat actors are abusing the GitHub API to discover organizations’ repositories and members via ghost accounts.

Socket traced the module to 222 repos across 190 accounts staging Vidar, RATs, and XMRig miners ...

NVIDIA Research introduced HORIZON, a hands-free agent framework for hardware design. It treats hardware design as repository-level code evolution. This research team exercises the register-transfer ...