Spotify’s Portal for Backstage routes routine coding-agent tasks to cheaper models, reducing the amount of frontier-model ...

PaperCut vulnerability CVE-2026-81578 and CVE-2026-82078 let a single attacker deploy AI agents that hacked 395 organizations ...

Much of the debate about agentic code scanning revolves around three core questions: Do more capable models find more vulnerabilities? Where does deterministic, rules-based SAST still fit? What does ...

GitHub Advanced Security released REST API endpoints on September 10 giving enterprise teams programmatic control over ...

Blackpoint Cyber and GreyNoise detail attacks exploiting two PaperCut zero-days, with hundreds of AI agents used to ...

Dependency scanning protects modern codebases from open-source risks by auditing direct and nested packages inside the CI/CD pipelines.

A suspected Russian-speaking actor used AI-assisted workflows to exploit PaperCut flaws and compromise at least 440 instances ...

Broadcom Inc. today announced TrueSource by Broadcom, a portfolio of commercially supported, verifiably built open source software for the enterprise. TrueSource brings together Spring Enterprise, the ...

Microsoft's multi-model agentic scanning system for finding security flaws in software, codename MDASH, has deployed to ...

Static application security testing, or SAST, is most useful when it is close to the way your team actually writes code. That is where Semgrep becomes valuable. It can scan source code quickly, fit ...

PaperCut NG and MF are under active attack as two zero-day flaws enable unauthenticated remote code execution, prompting an emergency patch.

Technology leader Ashish Chatterjee explains why modern applications, trusted data and clear governance must come before ...