The Computer Weekly Security Think Tank considers how security leaders can help assure access to the new and innovative cloud ...

GitHub is introducing a set of defenses against supply-chain attacks on the platform that led to multiple large-scale ...

A Dune-inspired worm recently hit CrowdStrike and npm, infecting hundreds of packages. Here's what happened - and how to protect your code.

Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to be the world’s biggest supply-chain attack ever. “Sorry everyone, I should ...

The private repositories of hundreds of organizations were published publicly in the second phase of the Nx supply chain attack. Hackers used the secrets stolen in the recent Nx supply chain attack to ...

Salesloft has revealed that the data breach linked to its Drift application started with the compromise of its GitHub account. Google-owned Mandiant, which began an investigation into the incident, ...

Threat actors had access to Salesloft’s GitHub account between March and June 2025 and performed reconnaissance in preparation for the widespread Salesforce-Salesloft data theft campaign. The data ...

Investigations into the Nx "s1ngularity" NPM supply chain attack have unveiled a massive fallout, with thousands of account tokens and repository secrets leaked. According to a post-incident ...

A threat actor released malicious updates on the npm package repository for components of a tool popular among developers intending to steal cryptocurrencies and key developer data. According to a ...

(KTLA) – Uber received reports of sexual assault or sexual misconduct in the United States nearly every eight minutes between 2017 and 2022, according to sealed court records reviewed by The New York ...

Microsoft will bring GitHub into its CoreAI division with the announcement this morning that GitHub CEO Thomas Dohmke will be stepping down as the leader of the widely used software development ...

GitHub Copilot Pro now supports GPT-5 in VS Code. A 30-day trial lets you test premium models for free. Add your OpenAI key to bypass Copilot restriction. First, open VS Code. Click the little Copilot ...