A VS Code vulnerability in GitHub.dev lets attackers steal full GitHub OAuth tokens via a single malicious link, exposing all private repositories.

VS Code flaw exposes GitHub OAuth tokens via one-click attack on GitHub.dev, enabling private repo access and token theft.

Fake Claude Code install sites are pushing malware that steals API keys, developer credentials, crypto wallets, and other ...

The Extensions SDK can be used to "expand, reshape and customize" Live Suite with new tools and features ...

From the creator of Hack, the language behind Facebook's business logic, comes a closed-loop coding agent that turns one ...

Cybersecurity researchers create a five-step exploit chain using over-permissioned roles, secrets discovery, and NHIs to attack a popular low-code service.

Novee researchers discovered an account takeover vulnerability in the open source CFP management tool Pretalx.

Boards should not wait for a digital equivalent of the Cuban Missile Crisis before serious governance gets built.

GlassWorm poisoned 300 GitHub repositories since 2025, enabling supply chain attacks against developers and organizations.

MESCIUS USA, Inc., a global provider of award-winning enterprise software development tools, is pleased to announce a new product for the Document Solutions product line: Document Solutions PDF JS.

The four C&C channels used by GlassWorm, the botnet targeting open source software developers, have been disrupted.