An unpatched zero-day vulnerability in Gogs, a popular self-hosted Git service, has enabled attackers to gain remote code ...

GitHub Spark, an AI app-generation tool separate from Copilot still in public preview, gains enterprise, billing, and UI upgrades in its latest update.

Threat actors are still abusing Visual Studio Code extensions as an entry point, with the latest fake Prettier incident ...

You may have noticed people discussing GitHub alternatives recently. In particular, several projects have migrated to a ...

The popular open-source SmartTube YouTube client for Android TV was compromised after an attacker gained access to the ...

The repository of the popular Syncthing fork for Android disappeared from GitHub and reappeared under dubious circumstances – is this an open-source hack?

VSCodium avoids this entire issue. It is a community-driven option for those who don't want the proprietary distribution ...

Malicious content in issues or pull requests can trick AI agents in CI/CD workflows into running privileged commands in an ...

Learn how to build and self host an AI SaaS app with Next.js, Prisma, and PostgreSQL so you can launch on a low cost VPS.

An attacker has been exploiting a zero-day vulnerability in Gogs, an open-source and popular Git service that allows for self ...

The latest version also executes malicious code during the preinstall phase, and is bigger and faster than the first wave, say researchers. A new version of the Shai-Hulud credentials-stealing ...

Coinbase’s Base launched a Solana bridge using Chainlink CCIP, enabling asset transfers between the networks now that it’s ...