Breaches, vulnerabilities and the people cleaning up after them. Reporting for defenders, not for panic.
GitHub has rolled out immutable releases as a general availability feature, preventing unauthorized changes to published software artifacts and their associated tags to strengthen supply chain security.
GitHub has enhanced its Copilot coding agent with built-in security and quality validation that automatically analyzes generated code for vulnerabilities, dependencies, and sensitive data without requiring additional licenses or setup.
Developers can now route code scanning alerts directly to Copilot for automated vulnerability fixes, combining the coding agent with Copilot Autofix to streamline security remediation workflows.
Canadian financial regulators imposed a record penalty against the cryptocurrency payments platform Cryptomus for failing to report suspicious transactions tied to child exploitation, fraud, ransomware, and sanctions evasion.
Federal authorities have brought criminal charges against a 19-year-old British national accused of being a core operative in Scattered Spider, a cybercrime collective responsible for extracting at least $115 million in ransom payments from victims across retail, transit, and healthcare sectors.
A self-replicating malware strain dubbed Shai-Hulud has compromised over 187 JavaScript packages in the NPM repository, automatically stealing developer credentials and publishing them to GitHub each time an infected package is installed.
A newly identified Russian-language affiliate program is fueling the rapid proliferation of fake online casinos that lure players with promotional credits, then demand cryptocurrency deposits before allowing any withdrawals.
Criminals are operating a sprawling scam infrastructure across Discord and social media, using polished gaming websites and celebrity endorsements to trick players into depositing cryptocurrency they will never recover.
