In the brief history of AI security, the prompt injection has quickly become the top threat. Large language models are ...

Wiz says GhostApproval abuses symlinks so AI coding agents write to SSH keys or shell startup files while showing benign ...

ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't ...

Researchers have uncovered a sustained campaign using GitHub's public APIs and ghost accounts to profile enterprise software ...

A “systematic vulnerability pattern” in at least six of the most widely used AI coding assistants can be abused to trick ...

Noma Labs tricked GitHub's AI agent into leaking private repositories with a crafted issue. The prompt-injection flaw, GitLost, has no code fix.

Entire, founded by former GitHub CEO Thomas Dohmke, has launched a preview of a distributed Git network that mirrors GitHub repos across regions for AI agents.

LongCat 2.0 is Meituan's 1.6T-parameter MoE model with a native 1M-token context, trained entirely on domestic AI ASIC ...

GitHub secret scanning now extends beyond org-owned repositories: Public Monitoring scans all of GitHub.com in real time, ...

Southern Glazer's Wine & Spirits (Southern Glazer's) – the world's preeminent total beverage distributor – today shared ...

Anthropic has found that its AI model Claude has a hidden internal workspace where it processes thoughts that never show up ...

The U.S. used its AI kill switch in June. China appears to be building one for July. Beijing has spent the past month in ...