A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...

State of Open Source Report. According to the 2025 Open Source Security and Risk Analysis (OSSRA) Report from Black Duck, ...

Interactive upgrade canvas presents a live view of the GitHub Copilot upgrade agent’s workflow as it assesses, plans, and ...

Researchers at the Alan Turing Institute in London have documented a way to get GitHub Copilot to generate harmful content with a 100% success rate — by never asking for it directly. The technique, ...

Big AI breakthroughs aren't the only interesting things happening.

Multiple threat actors are abusing the GitHub API to discover organizations’ repositories and members via ghost accounts.

Deep learning final year projects offer students the opportunity to explore the latest advancements in artificial intelligence and apply them to real-world problems. One project idea is developing a ...

Indirect prompt injection attacks are now draining cryptocurrency from AI agents in production. Zscaler ThreatLabz documented ...

Simon Willison] ported the Moebuis 0.2B image inpainting model to run locally in a web browser.  The web tool simply requires ...

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

Hackers compromised the Injective Labs SDK project's GitHub repository and used it to publish a malicious package on the Node ...

GitGuardian is now live on the Kiro Powers marketplace. Install the Power once, and Kiro's agent scans for exposed secrets ...