The OWASP-backed tool scans JavaScript and TypeScript lockfiles locally, aiming to help developers catch and remediate dependency risks before CI failures.

The best code editor might actually be your best everything editor.

The Infinite Loop by Nebius reports on the rise of AI-enabled vibe coding, exemplified by Base44, which allows users to create apps easily, shifting focus to decision-making over coding.

OpenAI’s GPT-5.5 has emerged as the top-performing AI coding model on DeepSWE, a new long-horizon software engineering ...

I ditched VS Code for Zed instead of going for Google's Antigravity, and now the editor feels genuinely fast ...

Bumblebee from Perplexity scans developer machines for compromised packages and AI tool configs, without triggering malware.

Google AI Studio lets users test Gemini models, build apps, generate media, and export code. Here’s what it does, costs, and ...

GlassWorm poisoned 300 GitHub repositories since 2025, enabling supply chain attacks against developers and organizations.

The security platform Socket has recently discovered an enormous worldwide malware operation that has been dubbed "TrapDoor".

Boards should not wait for a digital equivalent of the Cuban Missile Crisis before serious governance gets built.

Novee researchers discovered an account takeover vulnerability in the open source CFP management tool Pretalx.

Two months after Rapid7 discovered the hole in the Git service, the project maintainer has yet to patch the bug.