Attackers created at least 292 fake GitHub repositories that impersonated developer tools and redirected users to ...

IBM has expanded Bob with multi-agent AI tools, usage analytics, and isolated subagents for complex software development ...

A newly-disclosed exploit in Claude Code’s ‘auto-mode’ leaves developers facing remote code execution (RCE) vulnerabilities ...

The White House has launched GOLD EAGLE, an AI clearinghouse to coordinate vulnerability patching across infrastructure ...

IBM and Red Hat have launched Lightwell to automate vulnerability remediation across enterprise open-source software ...

According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD ...

The Federal Bureau of Investigation has warned that TeamPCP carried out software supply chain attacks targeting developer and security tools used in enterprise software environments. TeamPCP ...

Google Cloud is aiming to address historic complexities for developers with its full-stack AI infrastructure strategy. Developers have often encountered structural inefficiencies when stitching ...

North Korean threat actors are escalating the PolinRider supply chain attack across Go, Packagist, and npm package environments. The threat cluster – identified as Contagious Interview or Famous ...

Mozilla’s 0din security research team has shown how an AI coding agent can be used to run malware from a GitHub repository that appears harmless during a routine project setup. The demonstration ...

Deploying DFlash block diffusion on NVIDIA hardware accelerates autoregressive LLMs during latency-sensitive inference. Autoregressive large language models generate tokens sequentially. This ...

Microsoft has found that developers upgrading to some new AI models face unpredictable token consumption and escalating costs. The company recently evaluated AI agent execution across two of Anthropic ...