This week's ThreatsDay Bulletin covers curl flaws, a critical Hoppscotch bug, smart TV proxyware, macOS ClickFix attacks, ...

Security researchers at Novee found over 300 exploitable CI/CD workflow chains across repositories belonging to Microsoft, Google, Apache, Cloudflare, and the Python Software Foundation. The flaws ...

Cordyceps, a systemic class of exploitable CI/CD vulnerabilities, allows unauthenticated attackers to hijack developer ...

With a security initiative, OpenAI competes with Anthropic's Mythos and also offers a security review service for open-source ...

Ars Technica: It could be catastrophic, economically speaking, when the AI bubble finally bursts. But you point out that ...

As AI tools flood open-source maintainers with low quality bug reports, OpenAI's new Patch the Planet initiative aims to filter out the noise and fix real threats.

With the advent of AI-mediated APIs, the era of manually hard-coding every integration between every microservice may be ...

OpenAI launched Patch the Planet on June 22, partnering with Trail of Bits and HackerOne to find and fix vulnerabilities in widely used open-source software, a direct shot at Anthropic's Mythos and a ...

By targeting the automated workflows around repositories with targeted pull requests, attackers can potentially target ...

Embodied AI world models drew $6 billion in Q1 2026 alone, but new analysis from Fusion Fund investors argues the LLM scaling ...

The Meta-Harness Omnigent combines AI agents like Claude Code and Codex under a common policy and collaboration layer – under ...