Open source maintainers are right to be concerned about AI slop, but banning AI-generated code outright is a huge mistake.

Cordyceps, a systemic class of exploitable CI/CD vulnerabilities, allows unauthenticated attackers to hijack developer ...

When AI-assisted vulnerability discovery makes it dramatically easier to identify weaknesses hidden inside modern dependency ...

Microsoft shut down dozens of GitHub code repositories for Azure and AI coding tools after a reported hack.

Chainguard is expanding Repository with new policy controls, malware and greyware scanning, and support for Java, Python, and container artifacts-helping organizations govern software consumption ...

Apache® Magpie provides open source maintainers with platform infrastructure for agent-assisted repository maintainershipWilmington, DE, June 30, 2026 (GLOBE NEWSWIRE) -- The Apache Software ...

Researchers found Cordyceps CI/CD flaws affecting 300+ repositories, enabling code execution, credential theft, and supply ...

Malicious apps got into the Arch User Repository - how to protect yourself ...

A variant of the infamous Shai-Hulud worm wreaked havoc on Microsoft's code repositories, triggering disruptions to CI/CD workflows and heightening concerns about increasing software supply chain ...

U.S. Market to Expand USD 552.89 Million by 2035, While Europe is Projected to Reach USD 1.58 Billion Amid Rising SBOM and Cyber Resilience Compliance RequirementsAustin, June 24, 2026 (GLOBE NEWSWIRE ...

Microsoft GitHub hack hit open-source AI tools, exposing developer passwords and cloud credentials. Here’s why SA tech teams should care.

Microsoft has removed dozens of GitHub repositories after a malware scare. The affected projects may have exposed users to password and credential theft.