GitHub Stories

American Stories

GitHub stories

Application Security

Cobalt launches autonomous pentest for continuous testing

Security teams may get findings within 24 hours as Cobalt targets faster testing across sprawling software estates.

By Joseph Gabriel Lagonsin • 4 min read • Last month

Global Stories

GitHub stories

Data Protection

AvePoint launches AI data classification & recovery

Pressure is mounting on businesses to secure AI data and recover faster after cyber incidents, as static labels and ad hoc restoration prove too slow.

By Sofiah Nichole Salivio • 4 min read • Today

AIOps

Google tightens oversight of its AI Agent Skills repository

Stricter checks now govern the 15,000-star repository as Google tries to stop weak instructions and broken links hurting AI coding agents.

By Sean Mitchell • 4 min read • 2 days ago

Hybrid Cloud

BeyondTrust warns identity risks drive most attacks

Three out of four offensive security investigations traced back to identity or privilege, exposing access gaps across cloud, SaaS and AI systems.

By Joseph Gabriel Lagonsin • 4 min read • 3 days ago

Cloud Security

Island flags security concerns in nearly half of MCP servers

Nearly half of scanned MCP server builds carried at least one security concern, underscoring fresh supply chain risks as AI agents rely on them.

By Sean Mitchell • 5 min read • 3 days ago

DevOps

GitHub puts stacked pull requests into public preview

Developers can now break large code changes into smaller reviews as GitHub rolls the feature out across all repositories.

By Sean Mitchell • 4 min read • Last week

Ransomware

Google warns of rise in open source supply chain attacks

Malicious packages are now spreading faster across code repositories, with Google saying open source ecosystems face the sharpest rise in risk.

By Sean Mitchell • 5 min read • Last week

Data Protection

SpecterOps adds AWS & Entra Agent ID to BloodHound

Security teams can now trace attack routes across AWS and Microsoft Entra, as SpecterOps extends BloodHound into hybrid and AI-linked environments.

By Joseph Gabriel Lagonsin • 4 min read • Last week

Fintech

Juspay teams with Recurly on subscription payments

Subscription merchants could gain faster access to local payment methods as Recurly taps Juspay's Hyperswitch for more than 300 providers.

By Karen Joy Bacudo • 4 min read • Last week

Digital Transformation

HackerOne launches H1 Remediation for faster fixes

Critical vulnerability backlogs have swelled 29-fold, prompting a tool that sends fix plans into engineering systems and AI coding tools.

By Sofiah Nichole Salivio • 5 min read • Last week

Semiconductors

Why the next breakthrough in AI agents comes down to leadership, not technology

Enterprise AI agents are already generating revenue, but shortages of compute and skills could determine who captures the gains.

By Graeme Beardsell • 4 min read • Last month

Software-as-a-Service

Recurly partners Juspay to boost subscription payments

Merchants on Recurly will gain access to more than 300 payment providers through one integration, helping curb failed recurring charges.

By Karen Joy Bacudo • 4 min read • Last month

Malware

CrowdStrike warns of malware targeting AI coding tools

Developers using AI assistants could face stolen credentials and poisoned repositories as the worm hides inside normal coding workflows.

By Sean Mitchell • 4 min read • Last month

Supply Chain

GitHub Sponsors tops USD $100 million for open source

Companies and individual developers have helped sustain open source as GitHub Sponsors passes USD $100 million, easing pressure on maintainers.

By Sean Mitchell • 5 min read • Last month

AI Security

OpenAI restores limited access after safety failures

Limited internal access resumed after monitored tests found the model could bypass safeguards, prompting OpenAI to tighten trajectory-level monitoring.

By Mark Tarre • 5 min read • Last month

Open source

Agent Island 1.7.1 improves local Claude Code monitoring

Developers can now track Claude Code sessions more reliably on their own machines, with Agent Island 1.7.1 fixing local monitoring on macOS and Windows.

By Mark Tarre • 3 min read • Last month