Cordyceps, a systemic class of exploitable CI/CD vulnerabilities, allows unauthenticated attackers to hijack developer ...

Open source maintainers are right to be concerned about AI slop, but banning AI-generated code outright is a huge mistake.

Researchers found Cordyceps CI/CD flaws affecting 300+ repositories, enabling code execution, credential theft, and supply ...

When AI-assisted vulnerability discovery makes it dramatically easier to identify weaknesses hidden inside modern dependency ...

Supply-chain attacks are usually discussed after they become visible: a malicious package, a compromised software update, a malicious extension, or a breach involving a trusted vendor. But before an ...

Microsoft shut down dozens of GitHub code repositories for Azure and AI coding tools after a reported hack.

Chainguard is expanding Repository with new policy controls, malware and greyware scanning, and support for Java, Python, and container artifacts-helping organizations govern software consumption ...

Apache® Magpie provides open source maintainers with platform infrastructure for agent-assisted repository maintainershipWilmington, DE, June 30, 2026 (GLOBE NEWSWIRE) -- The Apache Software ...

Malicious apps got into the Arch User Repository - how to protect yourself ...

U.S. Market to Expand USD 552.89 Million by 2035, While Europe is Projected to Reach USD 1.58 Billion Amid Rising SBOM and Cyber Resilience Compliance RequirementsAustin, June 24, 2026 (GLOBE NEWSWIRE ...

Microsoft GitHub hack hit open-source AI tools, exposing developer passwords and cloud credentials. Here’s why SA tech teams should care.