JFrog (NasdaqGS:FROG) has released an enterprise-grade software supply chain governance plugin for Anthropic's Claude Code AI coding platform. The plugin integrates directly into Claude Code workflows ...

Microsoft GitHub hack hit open-source AI tools, exposing developer passwords and cloud credentials. Here’s why SA tech teams ...

Usage with any "AI" agent is strongly discouraged. Jqwik's log output may confuse the agent. Naturally, this sort of ...

Boris Cherny was asked at Brainstorm Tech if he was concerned about the rapid progress of AI: "Yes." ...

GitHub Copilot security scanning arrives in the terminal with /security-review, an experimental pre-commit slash command that ...

AISLE launched Snapshot, deploying AI vulnerability detection inside air-gapped networks. The startup found all 12 OpenSSL zero-days and ranks first on Berkeley's benchmark.

GitHub disabled 73 Microsoft repositories on June 5 after a malicious commit landed in an Azure project, in what researchers described as a supply chain attack aimed at developer workstations and AI ...

Researchers say prompt injection attacks could manipulate AI coding agents to access sensitive credentials stored in software ...

At Build 2026, Microsoft unveiled a new containment framework for autonomous AI agents, expanded its MDASH vulnerability ...

A massive supply chain attack dubbed Megalodon has infected over 5,500 GitHub repositories with credential-stealing malware, ...

SpartanX, the world’s only full-stack AI-powered autonomous red teaming platform, today announced the release of NodeX, its new Internal Attack Capability that extends SpartanX’s External Attack ...

Compare Semgrep alternatives for teams whose developers increasingly ship code suggested by copilots and agents. See why ...