GitLab vulnerability CVE-2026-19478 carries a CVSS 9.4 rating, letting unauthenticated attackers remotely delete or modify public projects with no login required. An emergency patch released August 17 ...

NuGet API key expiration 2026: Microsoft caps new NuGet.org API keys at 30 days starting August 17, forcing all existing keys ...

Attackers don’t need credentials or user interaction to exploit the flaw which could enable supply chain attacks in self-hosted code repositories.

GitHub's CI/CD layer — the service engineering teams depend on to build, test, and ship software automatically — has accumulated more than fourteen hours of downtime in the past 90 days and has now ...

GitLab Inc., the intelligent orchestration platform for DevSecOps, is introducing updates that give enterprises more control as they scale agentic software development.

Discover the best open-source vulnerability scanners of 2026 that help CIOs minimize security costs while ensuring robust protection against software vulnerabilities. Learn about their features and ...

For UK SMEs shipping software, the question is no longer just whether a build passed tests. It is whether you can prove what was built, from which source, by which system, and with which inputs. That ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

A GitHub outage this week, after months of reliability issues, had some users fed up -- but leaving the platform would be ...

Static application security testing, or SAST, is most useful when it is close to the way your team actually writes code. That is where Semgrep becomes valuable. It can scan source code quickly, fit ...

Azul, the trusted leader in enterprise Java for today’s AI -first world, today announced the appointment of Kenny Johnston as chief product officer (CPO). Johnston brings deep experience building ...