
Dev
Automating Security Patches: Streamlining Dependabot PR Merges with GitHub Actions
12/20/2025

Security
AI-Powered CVE Intelligence: Transforming Vulnerability Management for Modern Enterprises
12/4/2025
AI
DataDog's IOC Scanner: A New Frontline Against npm Supply Chain Attacks
11/29/2025

Security
NPM's 'Invisible Dependency' Flaw Fuels 86K Malicious Package Downloads
10/30/2025

AI
The Critical Art of Testing MCP Servers: Safeguarding AI-System Integrations
10/15/2025

Dev
GhostAction Attack Exfiltrates 3,325 Secrets in Sophisticated GitHub Supply Chain Breach
9/8/2025

Dev
GitHub Debuts AI-Powered Autofix for Vulnerability Remediation in Pull Requests
9/2/2025

Security
Nx Build Platform Compromised: Malicious Packages Trigger Massive Secrets Leak
8/31/2025

Security
Secrover: Open-Source Security Audits Democratize Vulnerability Scanning
8/1/2025

AI
The Spy in Your IDE: How AI Coding Agents Risk Exposing Your Secrets
7/28/2025
Dev
GitLab CI/CD Pipeline Tokens Vulnerable to Stealthy Exposure via API, Researcher Warns
7/26/2025

Security
Hacker Exploits Amazon Q AI Assistant in VS Code Extension, Exposing Critical AI Security Flaws
7/25/2025

AI
Vendetect: Exposing Code Theft and Hidden Vulnerabilities in Vendored Dependencies
7/22/2025