Claude Code flaws allow remote code execution and API key theft via untrusted repositories; three bugs fixed across 2025–2026 releases.

OpenAI has introduced a new application security agent called Codex Security, designed to analyze software projects in depth, detect complex vulnerabilities, and provide recommended fixes.

APT28 exploited CVE-2026-21513, an MSHTML zero-day (CVSS 8.8), using malicious LNK files to bypass security controls and execute code.

A recent study found that more than a third of 1,261 open source libraries had a known vulnerability and about a quarter of the downloads were tainted A study of how 31 popular open source code ...

Copilot Autofix, a new addition to the GitHub Advanced Security service, analyzes vulnerabilities in code and offers code suggestions to help developers fix them. GitHub has unveiled Copilot Autofix, ...

Anthropic has launched Claude Code Security, an AI tool that scans code for vulnerabilities and suggests patches. The newtool ...

Notepad++ has been released in version 8.9.2. The new version improves security mechanisms and closes a highly risky security vulnerability through which attackers can execute arbitrary code. In the ...

Contrast Security, ADR and Runtime Security leader, today announced an integration with ServiceNow Application Vulnerability Response (AVR). The integration gives joint customers better visibility ...