Chainguard is expanding beyond open-source security to protect open-core software, AI agent skills, and GitHub Actions.

One of the most popular ways to view the Epstein Files, an interface called Jmail that mimics a Gmail inbox, is hosted on Guillermo Rauch’s $9 billion unicorn Vercel.

GlassWorm campaign injects malware into GitHub Python repos using stolen tokens since March 8, 2026, exposing developers to ...

How can an extension change hands with no oversight?

These heroes of open source software are hard at work behind the scenes without you even realizing it.

Google's latest threat report warns that third-party tools are now prime targets for attackers - and businesses have only days to prepare defenses.

Millions installed 'productivity' Chrome extensions that became malware after acquisition. Here's how browser extensions became enterprise security's weakest link.

Leaked API keys are nothing new, but the scale of the problem in front-end code has been largely a mystery - until now. Intruder’s research team built a new secrets detection method and scanned 5 ...

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources. Ludi Akue discusses how the tech sector’s ...

OpenAI just lobbed a grenade at vibe-coding startups like Cursor and Windsurf. The company behind ChatGPT has announced the Codex MacOS app, its take on an integrated development environment (IDE) ...

An open source AI agent dubbed OpenClaw — formerly MoltBot, née ClawdBot — has become the fastest-growing project on GitHub. But with that popularity has come security concerns. As Token Security ...