Researchers found Cordyceps CI/CD flaws affecting 300+ repositories, enabling code execution, credential theft, and supply ...

Cordyceps, a systemic class of exploitable CI/CD vulnerabilities, allows unauthenticated attackers to hijack developer ...

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...

The infostealer was delivered via CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp.

A breakdown of the Google Antigravity 2.0 launch, including the new agent manager, SDK features, and how to fix auto-update ...

Anthropic's Claude platform went down for tens of thousands of users on Tuesday, June 23, as Downdetector reports surged past 8,000 in the United States alone — the latest in a documented run of ...

Cursor is training its own Opus-class model from scratch. They are no longer fine-tuned on open-source model like Kimi K2.

Jenkins Attacks Expose CI Pipeline Risk Arabian Post. clearfix>Attackers are probing vulnerable Jenkins servers after disclosure of a high-severity deserialisation flaw that can let a low-privileged ...

Backstage solved the portal problem, not the platform problem. A portal organizes catalogs, documentation, and templates. A ...

Cloudflare ended years of partner-only restrictions on Wednesday, opening self-managed OAuth 2.0 to every developer on its platform. The move eliminates the manual onboarding process that previously ...

Red Hat hit by npm supply‑chain attack - here's how to stay safe ...

SAN FRANCISCO and NOIDA, India, June 25, 2026 — TestMu AI (formerly LambdaTest), the world's first Agentic AI-powered Quality Engineering platform, today announced AI-Powered Test Case Generation for ...