GitHub Copilot security review launched in the desktop app July 14, giving all subscribers — Free tier included — AI-driven ...

ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't ...

Interactive upgrade canvas presents a live view of the GitHub Copilot upgrade agent’s workflow as it assesses, plans, and ...

VS Code 1.127 enhances agent session management, introduces per-site browser permissions, and makes browser tools for agents ...

Anthropic Product Manager and Anthropic engineer Boris Cherny in a video introducing Claude Code on Feb 24, 2025. Anthropic.com Anthropic's Boris Cherny has stopped writing prompts. The creator and ...

The issue affects GitHub Agentic Workflows setups that read public input, hold private repo access, and can post output ...

Multiple threat actors are abusing the GitHub API to discover organizations’ repositories and members via ghost accounts.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a recent data leak in which a contractor published dozens of internal CISA credentials — including AWS Govcloud ...

Kaspersky’s Global Research and Analysis Team (GReAT) has conducted a major review of the GitHub Actions workflows within top-starred repositories. Leveraging newly introduced Kaspersky Container ...

Microsoft researchers have detailed an exploit chain, named AutoJack, that turns an AI browsing agent into a delivery vehicle for remote code execution. Steer the agent to load an attacker's web page, ...

Explore the latest news and expert commentary on Application Security, brought to you by the editors of Dark Reading ...

A Claude Code plugin marketplace from Trail of Bits providing skills to enhance AI-assisted security analysis, testing, and development workflows. Codex can load this marketplace through its Claude ...