Ethereum gossipsub vulnerability CVE-2026-34219 lets any unauthenticated peer crash a validator with a single crafted PRUNE ...

Multiple threat actors are abusing the GitHub API to discover organizations’ repositories and members via ghost accounts.

A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit, ...

Hackers are actively exploiting a critical vulnerability in the official Docker image for the Gitea self-hosted Git service ...

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

New standards framework introduces maturity model and certification program designed to help organizations evaluate ...

Ethereum researchers are using AI agents to hunt for vulnerabilities, shifting security work from finding bugs to proving ...

GitHub also launches Codex as an agent provider in JetBrains IDEs and rolls out AI credit pools giving enterprise admins ...

Alan Turing Institute researchers made GitHub Copilot produce harmful content it refuses in chat, by spreading the request across a coding workflow.

OpenAI found two unrelated bugs masquerading as one in ChatGPT's data infrastructure. Silent hardware corruption on one Azure ...

GitHub alternatives are fine, but self-hosting gives you real control ...

Engineering teams do not lose most of their time on typing code. They lose it on handoffs, status changes, missing context, waiting for review, failed builds, repeated triage, manual ticket updates, ...