A couple of weeks ago, I had the opportunity to use Google's Jules AI Agent to scan through the entire code repository of one of my projects and add a new feature. The AI took about 10 minutes. All ...

A growing body of academic research warns that AI-assisted “vibe coding,” where language models assemble software from ...

Attackers are finding more and more ways to post malicious projects to Hugging Face and other repositories for open source artificial intelligence (AI) models, while dodging the sites' security checks ...

Pervasive, evasive malware thought to have been eliminated has wormed its way back into development environments. Just a little over two weeks after GlassWorm was declared “fully contained and closed” ...

Supply chain attacks are increasing in volume, but open source vulnerabilities continue relatively unnoticed.

Anthropic launches AI agents to review developer pull requests. Internal tests tripled meaningful code review feedback. Automated reviews may catch critical bugs humans miss. Anthropic today announced ...

Kusari Inspector is now free to CNCF and OpenSSF projects, delivering AI-powered dependency, license and security ...