GitHub’s actions/checkout v7 now blocks risky fork PR checkouts in privileged workflows to reduce common pwn request attacks.

CVE-2026-12957 in Amazon Q is the third MCP auto-execution vulnerability in three AI coding tools. The pattern reveals a ...

Anthropic has found that its AI model Claude has a hidden internal workspace where it processes thoughts that never show up ...

Karpathy CLAUDE.md ten rules: a document attributed to Andrej Karpathy began circulating Friday, adding six agent self-check ...

GitHub secret scanning now extends beyond org-owned repositories: Public Monitoring scans all of GitHub.com in real time, ...

Chainguard is expanding Repository with new policy controls, malware and greyware scanning, and support for Java, Python, and container artifacts-helping organizations govern software consumption ...

For the last few years, most organizations have talked about AI risk in the language of governance. Is the model accurate? Is ...

Look to these tools to improve your AI coding practices and the quality, security, and reliability of your AI-generated code.

For years, the promise of AI in software engineering has delivered incremental gains. Most organizations have adopted an ...

Learn how malicious AI agent skills easily bypass static scanners. Discover how runtime checking secures tools like Claude ...