Cordyceps, a systemic class of exploitable CI/CD vulnerabilities, allows unauthenticated attackers to hijack developer ...

Open source maintainers are right to be concerned about AI slop, but banning AI-generated code outright is a huge mistake.

Although there’s probably no good reason to want to run image editing software from 1996 other than for nostalgia’s sake, if ...

Researchers found Cordyceps CI/CD flaws affecting 300+ repositories, enabling code execution, credential theft, and supply ...

Microsoft shut down dozens of GitHub code repositories for Azure and AI coding tools after a reported hack.

When AI-assisted vulnerability discovery makes it dramatically easier to identify weaknesses hidden inside modern dependency ...

JFrog's security research lab, based in Silicon Valley, said Friday (local time) it had discovered six malicious packages in ...

Chainguard is expanding Repository with new policy controls, malware and greyware scanning, and support for Java, Python, and container artifacts-helping organizations govern software consumption ...

Apache® Magpie provides open source maintainers with platform infrastructure for agent-assisted repository maintainershipWilmington, DE, June 30, 2026 (GLOBE NEWSWIRE) -- The Apache Software ...

A variant of the infamous Shai-Hulud worm wreaked havoc on Microsoft's code repositories, triggering disruptions to CI/CD workflows and heightening concerns about increasing software supply chain ...

U.S. Market to Expand USD 552.89 Million by 2035, While Europe is Projected to Reach USD 1.58 Billion Amid Rising SBOM and Cyber Resilience Compliance RequirementsAustin, June 24, 2026 (GLOBE NEWSWIRE ...

Microsoft GitHub hack hit open-source AI tools, exposing developer passwords and cloud credentials. Here’s why SA tech teams should care.