An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...

Mozilla’s 0din team showed how a Claude Code malware GitHub repo attack could use a clean-looking repository to open a ...

一个毫无代码的文本，竟连霸GitHub热榜第一。Karpathy的编程神技被化作「AI紧箍咒」，让乱写Bug的大模型瞬间老实！ 就在刚刚，一个.md文件冲爆了整个GitHub！ 本周新增44,465颗星，总星数61.6k。连续三天Trending日榜第一。 它叫CLAUDE.md，一个Markdown配置文件。 里面写着四条规矩，全部源自Karpathy对LLM编程陷阱的观察，用来管住AI编程时最 ...

A new study has found that coding agents were used in an estimated range of 22.20% to 28.66% of 128,018 GitHub projects. The researchers found adoption across mature projects, established ...

Three levels of indirection, all with seemingly innocuous steps, will catch a bot off-guard.

Microsoft-owned GitHub continues to embrace OpenAI and Anthropic AI advances. Microsoft-owned GitHub continues to embrace OpenAI and Anthropic AI advances. is a senior correspondent and author of ...

Six teams exploited Claude Code, Copilot, Codex, and Vertex AI in nine months. Every attack hit runtime credentials that IAM tools never tracked.

A security researcher, working with colleagues at Johns Hopkins University, opened a GitHub pull request, typed a malicious instruction into the PR title, and watched Anthropic’s Claude Code Security ...

In a recent talk, Anthropic’s head of Claude Code, Boris Cherny, said he had almost entirely switched to mobile AI coding as ...

Build 2026: Microsoft's MDASH exits preview with 100+ specialized threat-hunting AI agents ...