GitHub secret scanning now extends beyond org-owned repositories: Public Monitoring scans all of GitHub.com in real time, ...

GitHub’s actions/checkout v7 now blocks risky fork PR checkouts in privileged workflows to reduce common pwn request attacks.

Chainguard is expanding Repository with new policy controls, malware and greyware scanning, and support for Java, Python, and container artifacts-helping organizations govern software consumption ...

Cordyceps, a systemic class of exploitable CI/CD vulnerabilities, allows unauthenticated attackers to hijack developer ...

Decades-old Bash shell tricks can bypass safeguards in most open source AI coding agents, creating a new software supply ...

Robot skill library ASPIRE — released June 29 by NVIDIA and collaborators — gives robots persistent memory by storing every debugging fix as a named, reusable code pattern. It pushed bimanual handover ...

The critical libssh2 CVE-2026-55200 flaw inverts SSH security: the remote server attacks the connecting client, no ...

A pilot flying a small aircraft over Alabama declared an emergency and put the plane down on a paved road after oil coated ...

I’ve been having a lot of conversations lately with directors and senior managers about air quality monitoring. The pattern ...

If you had ancestors in America during the revolution of the 1770s and 1780s, there’s no better time than the month of our nation’s 250th birthday to get busy and research them, courtesy of ...

It is now time to refresh standard protective order language to prevent any materials produced in discovery from making their way to open (public) AI models. The advent of generative (and now agentic) ...