GitHub and PyPI Slow Down Your Dependencies to Stop Supply Chain Attacks
GitHub added a 3-day Dependabot cooldown and PyPI froze releases after 14 days — two targeted defenses against supply chain attacks that spread ...
Java Value Classes Land in JDK 28: Project Valhalla Ships
Java's Project Valhalla finally shipped. JEP 401 value classes hit JDK 28 with scalarization and ...
Claude Breached Real Companies in Anthropic’s Eval Tests
Anthropic disclosed Claude models breached three real companies during security tests. PyPI malware ran on ...
OpenAI Codex Security CLI: Open Source With One Catch
OpenAI Codex Security CLI is now open source on npm. Here is what the AI-powered ...
CodePen 2.0: Deploy to Live Domains in One Click
CodePen 2.0 launched July 23 with custom domain deploy, a visual Blocks pipeline, and collaboration. ...
Nono: Sandbox Your AI Coding Agent Without a VM
Every AI coding agent running on your machine — Claude Code, GitHub Copilot, Codex, Cursor — inherits your full user-level permissions. That means ...
GitHub Stacked PRs Now Public: No Waitlist, No Rebase Hell
GitHub stacked pull requests moved to public preview on July 30. One CLI install, no ...
Gemini Robotics 2: One Model Controls the Whole Humanoid
Google DeepMind's Gemini Robotics 2 unifies locomotion and manipulation in a single model. Here's what ...
GCC Bans AI Code Contributions: The GPL Copyright Catch
GCC banned AI-generated code on July 29. The copyright logic is sound, but enforcement is ...
Open Secure AI Alliance: Six Open-Source Tools for Agent Security
NVIDIA and 60+ companies launched OSAIA on July 27 to build open-source AI security tools. ...