This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, ...

Google released the Genkit Agents API in preview for TypeScript and Go. The open-source framework packages message history, ...

Multi-chat Claude sessions allow VS Code users to run multiple related conversation threads in one Claude agent session ...

Interactive upgrade canvas presents a live view of the GitHub Copilot upgrade agent’s workflow as it assesses, plans, and ...

GitHub also launches Codex as an agent provider in JetBrains IDEs and rolls out AI credit pools giving enterprise admins ...

GitHub Copilot VS Code browser tools are now generally available and enabled by default for all paid Copilot subscribers. The ...

Discover vibe coding, a trend that simplifies software creation using AI and plain language prompts instead of traditional ...

Microsoft has released Visual Studio Code 1.126, just one week after shipping version 1.125. The latest update focuses on improving GitHub Copilot workflows, giving developers better visibility into ...

My AI stopped having goldfish syndrome.

Microsoft Threat Intelligence discovered that Anthropic’s Claude Code GitHub Action could expose CI/CD workflow secrets when AI agents process untrusted GitHub content, including issue bodies, pull ...

A flaw in Anthropic’s Claude Code GitHub Action let attackers bypass permission checks via a fake bot account and use prompt injection to steal OIDC tokens, gaining write access to any vulnerable ...

A security researcher found a flaw in Anthropic's Claude Code GitHub Action that let an attacker take over vulnerable public repositories running it, with nothing more than a single opened GitHub ...