Ars Technica

For the 2nd time in weeks, Microsoft packages laced with credential stealer

Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI ...
The Next Web

One click on GitHub.dev is all it takes to hand over your private repositories

Every developer who has ever pressed the period key on a GitHub repository, launching the convenient browser-based VS Code editor known as GitHub.dev, has unknowingly accepted a bargain. In exchange ...
The Verge

Strava blames zero-code AI apps and scrapers as it tightens API access

Developers will now have to pay a $11.99 / month subscription to build apps using Strava’s data. Developers will now have to pay a $11.99 / month subscription to build apps using Strava’s data. is a ...
Krebs on Security

Lawmakers Demand Answers as CISA Tries to Contain Data Leak

Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor ...
CSOonline

Contractor’s public GitHub account exposed GovCloud and CISA credentials

‘This kind of exposure happens with alarming frequency,’ said an expert; here’s what CSOs and CIOs should do to protect employees’ and contractors’ GitHub repositories. Until a few days ago, a ...
VentureBeat

Claude agents can finally connect to enterprise APIs without leaking credentials

The reason enterprises have been slow to connect AI agents to internal APIs and databases isn't the models — it's the credentials. In most production deployments, the agent carries authentication ...
Ars Technica

In stunning display of stupid, secret CISA credentials found in public GitHub repo

Security researcher Brian Krebs brings us the news that America’s Cybersecurity & Infrastructure Agency (CISA) has had a large store of plaintext passwords, SSH private keys, tokens, and “other ...
Krebs on Security

CISA Admin Leaked AWS GovCloud Keys on Github

Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS ...
TechCrunch

OpenAI launches new voice intelligence features in its API

OpenAI said Thursday that its API will now include a number of new voice intelligence features designed to help developers create apps that can talk, transcribe, and translate conversations with users ...
The Verge

Valve is fighting Steam Controller scalpers with a new reservations system

Starting Friday, you can make a reservation to buy a Steam Controller. Starting Friday, you can make a reservation to buy a Steam Controller. is a senior reporter covering technology, gaming, and more ...
Visual Studio Magazine

Using Data API Builder to Speed Up Application Development

Data API Builder helps developers expose database objects through REST and GraphQL without building extensive custom data access code. Steve Jones' Visual Studio Live! San Diego 2026 session will show ...