|
ARCHIVE
Over 400 NPM Packages Infected in ChainDrop Supply Chain Attack
|
NPM packages
supply chain attack
malware
ChainDrop
GitHub
credentials
|
Source: opens original article in a new tab
|
|
|
ARCHIVE
AWS launches Kiro Crew, an autonomous agentic orchestrator for 24/7 code development
|
AWS
Kiro Crew
AI coding agents
autonomous development
developer tools
24/7 development
|
Source: opens original article in a new tab
|
|
|
ARCHIVE
GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption
|
Dependabot
GitHub
package security
software supply chain
vulnerability management
|
Source: opens original article in a new tab
|
|
|
ARCHIVE
Move code review before the code
|
code review
pull request
software development
engineering workflow
|
Source: opens original article in a new tab
|
|
|
ARCHIVE
Agentic DevOps at AWS
|
DevOps
AI Agents
Automation
Incident Response
Cloud Operations
|
Source: opens original article in a new tab
|
|
|
ARCHIVE
Minimus opens its entire secure container image catalog to developers for free
|
container images
open source
software security
vulnerability management
|
Source: opens original article in a new tab
|
|
|
ARCHIVE
GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks
|
npm
supply chain security
developer tools
cybersecurity
|
Source: opens original article in a new tab
|
|
|
ARCHIVE
Microsoft launches Rayfin to let developers and agents build app back ends on Fabric
|
microsoft
rayfin
fabric
open-source-software
|
Source: opens original article in a new tab
|
|
|
ARCHIVE
OpenAI extends Codex with productivity tools for nontechnical users
|
ai-tools
automation
codex
chatgpt
|
Source: opens original article in a new tab
|
|
|
ARCHIVE
What 2,000 Exposed Vibe-Coded Apps Reveal About the Limits of Most Security Stacks
|
AI
cybersecurity
employee-generated
production systems
data breaches
|
Source: opens original article in a new tab
|
|