Malicious VS Code Extensions Take Screenshots, Steal Info
Developers were the targets of two new malicious Microsoft Visual Studio Code (VS Code) extensions created by a threat actor that security researchers believe is experimenting with methods for delivering information-stealing malware to the victims’ systems. The malicious extensions come posing as a harmless “premium dark theme” and an AI-powered coding assistant, but both – […]
Anthropic Acquires Bun to Accelerate AI Coding Tools
Anthropic says it has acquired Bun, a high-performance JavaScript toolkit, to turbocharge its artificial intelligence (AI) coding capabilities — further underscoring a significant push into developer tooling as it scales Claude Code, its code-generation platform. Financial terms of the deal were not disclosed, but Anthropic emphasized that Bun will remain open source and MIT-licensed. The […]
New Relic Enhances Azure Integration with AI-Powered Observability Tools
New Relic Inc. unveiled a suite of intelligent observability integrations with Microsoft Azure on Tuesday to streamline incident response and boost developer productivity as enterprises rush to adopt artificial intelligence (AI) workflows. The company’s new AI Model Context Protocol (MCP) Server now feeds real-time observability data directly into Azure’s SRE Agent and Microsoft Foundry, eliminating […]
GitHub Adds Platform for Managing AI Agents Embedded in DevOps Workflows
GitHub today launched a platform for managing artificial intelligence (AI) agent workflows across the entire software development lifecycle (SDLC). Announced at the GitHub Universe 2025 conference, Agent HQ makes it possible to unify the management of AI agents developed by not just GitHub but also third-party providers, including Anthropic, OpenAI, Google, Cognition and xAI. As […]
JFrog CEO: AI Agents Require Practices Beyond Security, Traceability
NAPA, Calif. — A new persona in software development, artificial intelligence (AI) agents rather than human developers, has made it imperative that foundational platforms incorporate agentic practices alongside security, traceability, and visibility to succeed in the AI era. “Every foundational platform requires a single system of record,” Ben Haim told the crowd. “If you don’t […]
Malicious Nx Packages Used in Two Waves of Supply Chain Attack
The Nx build system was hit by a supply chain attack dubbed “s1ngularity,” leaking thousands of secrets and exploiting AI tools for data theft.
Qwiet AI Extends Microsoft Support in Platform for Fixing Vulnerabilities
Qwiet AI extends its AI-driven application security platform with deeper Microsoft DevOps integrations, enhanced automation, and expanded AutoFix capabilities to proactively remediate code vulnerabilities.
GitHub CEO To Step Down As Company Is More Tightly Embraced by Microsoft’s CoreAI Team
Thomas Dohmke, CEO of Microsoft Corp.-owned GitHub, said on Monday he’s stepping down and will leave the company at the end of 2025 to become “a founder again,” signaling a major shakeup in how the artificial intelligence (AI) coding unit is run. Since Microsoft acquired GitHub in 2018 for $7.5 billion, it has operated as […]
GitHub Spark: From Idea to Deployed App in Minutes
GitHub Spark, now available in public preview for Copilot Pro+ subscribers, represents a paradigm shift in how we approach application development.
New Relic Integrates AI Agents with Copilot Coding Agent from GitHub
New Relic this week made available a preview of an integration with the artificial intelligence (AI) agents it created for its observability platform with the AI agents that GitHub has developed. Nic Benders, chief technical strategist for New Relic, said AI agents that the company has developed will now be able to create an issue […]
North Korea’s Lazarus Group Targets Developers, Supply Chain
North Korea’s notorious Lazarus Group is using an advanced malicious implant to target cryptocurrency wallets and spreading it via legitimate GitHub profile and possibly through npm packages. The ongoing campaign, dubbed Operation Marstech Mayhem, is the example of a threat group using open-source code repositories like GitHub, npm, and Python Package Index (PyPI) in software supply […]
OpenAI’s o3-mini Brings Enhanced AI Capabilities to GitHub’s Developer Tools
GitHub integrates OpenAI’s o3-mini model into Copilot and GitHub Models, bringing enhanced AI reasoning capabilities to developers while maintaining fast response times.
Best Practices for CI/CD Migration: The GitHub Enterprise Example
Here’s a look at challenges to navigate, along with tips on how to make CI/CD migration as smooth as possible.
GitHub Extends Reach and Scope of Generative AI Ambitions
GitHub today revealed it is adding support for both the Claude Sonnet 3.5 large language model (LLM) from Anthropic and the Gemini Pro 1.5 LLM from Google to its artificial intelligence (AI) platform for writing code.
Riveting Repositories: JFrog GitHub Unification Leaps Onward
Repositories rarely rivet and rope themselves together quite like the union that has been forming between JFrog and GitHub. The company known for its bullfrog-themed universal repository manager for software application artifacts spanning dependencies, binaries and configuration files continues to forge a partnership with the widely popular web-based developer code collaboration platform. The suggestion from […]
JFrog Extends GitHub Alliance to Provide Unified Dashboard
JFrog and GitHub today extended their alliance to provide a unified dashboard that makes it simpler to track and prioritize vulnerabilities from source code to the binaries that are ultimately deployed.
GitHub Steers Copilot Autofix Into Eye of AI Security Storm
GitHub has come forward with its new Copilot Autofix tool. This AI-driven software service is targeted at developers who need to address software vulnerabilities in code destined for traditional applications and inside those infused with an injection of new or existing breeds of AI.
Microsoft GitHub Alignment Fuels Birth of the AI Developer
Microsoft is partnering with GitHub to enable its 100 million+ developers to build AI applications directly on the GitHub platform.
The Software Extinction Event That Wasn’t
The world may have just avoided a cybersecurity disaster, with potential impact of CrowdStrike x1000. Imagine if the world’s most pervasive programming language, used in the majority of organizations, services, websites and infrastructure today, was itself made to be malicious? Cybersecurity researchers from JFrog recently discovered a GitHub Personal Access Token in a public Docker […]
JFrog Forms Broad DevOps Alliance with GitHub
JFrog and GitHub today revealed a partnership through which they will work together to integrate their respective DevOps platforms, including integrations with GitHub Copilot, the generative artificial intelligence (AI) framework that is based on large language models (LLMs) developed by OpenAI. Integrations with the JFrog Software Supply Chain Platform and GitHub services and platforms will […]
GitHub Preview of Copilot Workspaces Advances AI Agenda
GitHub this week made available a formal technical preview of an approach to building software that uses generative artificial intelligence (AI) to complete tasks on behalf of a software engineering team. Rather than simply generating code for developers, GitHub Copilot Workspace is leveraging more advanced reasoning engine capabilities that are being added to large language […]
How GitHub Approaches Internal Developer Experience
Bill Doerrfeld explores how GitHub approaches DX and instills these traits into its software development culture.
GitHub Aims to Expand Copilot Scope and Reach in 2024
GitHub’s Copilot Workspace will leverage generative AI to automatically propose a plan for building an application based on natural language descriptions.