The GitHub Actions Attack Pattern Your CI Security Scanners Miss

ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't ...
Tech Times

GitHub Secret Scanning Now Watches All Public Repos for Leaked Enterprise Keys

GitHub secret scanning now extends beyond org-owned repositories: Public Monitoring scans all of GitHub.com in real time, ...

Indie Game Engine Will Require ‘All Code To Be Human-Authored’ Following An AI Code ‘Shitshow’

“Honestly, AI slop [pull requests] are becoming increasingly draining and demoralizing for #Godot maintainers,” Verschelde ...
Rock Paper Shotgun

"Low-effort slop": The creators of the Godot engine behind Slay the Spire 2 are cracking down on "vibe-coding" and now require genAI disclosures

The Godot Foundation have announced a crackdown on genAI code, including mandatory disclosures, following a wave of ...
Windows Report

Malicious PyPI Packages Let Hackers Control Telegram Bot Servers

Operation Navy Ghost is targeting Python developers who build Telegram bots by hiding backdoors inside trojanized Pyrogram forks uploaded to PyPI. The campaign has been active since November 2025, ...
Hosted on MSN

Anthropic Claude Code creator: I haven't written a line of code in 8 months

“I haven't written a line of code by hand in 8 months.” At Fortune Brainstorm Tech, Anthropic Head of Claude Code Boris Cherny said AI now handles much of the coding process. As a result, the ...
Entrepreneur

The Man Behind Anthropic’s Claude Code Hasn’t Written a Line of Code in 8 Months — Here’s What He Does Instead

Boris Cherny is the creator of Anthropic’s Claude Code tool, which writes code on behalf of developers based on a text prompt. Cherny hasn’t handwritten code in eight months; instead, he manages ...
Digital Trends

NotebookLM can now write code, build spreadsheets, and find sources for you

Google has upgraded NotebookLM with a new reasoning engine, expanded file output options, and a more flexible research workflow, giving the AI notebook tool a broader set of capabilities for handling ...
The Next Web

Anthropic says Claude writes 80% of its own code and the world needs a plan to hit the brakes

Anthropic reveals that Claude now writes over 80% of its production code, with engineers shipping 8x more code per quarter than in 2024. The company’s new Anthropic Institute paper maps the path to ...
The Next Web

A single GitHub issue could have hijacked Anthropic’s own Claude Code action and poisoned every project that uses it

A flaw in Anthropic’s Claude Code GitHub Action let attackers bypass permission checks via a fake bot account and use prompt injection to steal OIDC tokens, gaining write access to any vulnerable ...
Bleeping Computer

VS Code zero-day lets hackers steal GitHub tokens in one click

A security researcher has released exploit code for a Visual Studio Code (VS Code) zero-day vulnerability that allows attackers to steal GitHub authentication tokens by tricking users into clicking a ...