Microsoft’s GitHub has suffered what appears to be its biggest ever security breach after confirming that attackers ...

GlassWorm poisoned 300 GitHub repositories since 2025, enabling supply chain attacks against developers and organizations.

I ditched VS Code for Zed instead of going for Google's Antigravity, and now the editor feels genuinely fast ...

GitHub CISO Alexis Wales confirmed Thursday that a poisoned build of the Nx Console Visual Studio Code extension — live on ...

The best code editor might actually be your best everything editor.

GitHub’s internal repositories — now staged publishing in npm 11.15.0 requires a human 2FA approval before any package goes ...

Bumblebee from Perplexity scans developer machines for compromised packages and AI tool configs, without triggering malware.

Ubiquiti released a new security bulletin detailing fixes for six security issues, including one rated 9.1 (critical) and one scoring a perfect 10.0 on the CVE risk scale. The vulnerabilities ...

The four C&C channels used by GlassWorm, the botnet targeting open source software developers, have been disrupted.

I tried building a website for a roofing service company called "Roofing Stars," based in Cape Town, South Africa. The kind of company that installs solar panel roofs and does sen ...

Massive scale attack The "Megalodon" campaign compromised over 5,000 GitHub repositories in 6 hours by weaponizing automated GitHub Actions workflows that execute when developers push code or merge ...