Latest Tech News
Daily updates from AI, software, hardware and more.
GitHub expands secret scanning with Resend tokens, VolcEngine push protection and leak insights
GitHub added Resend and APIclub token detection, VolcEngine push protection and new public monitoring insights.
CISA warns attackers are exploiting on-premises SharePoint Server flaws
CISA says attackers are exploiting on-premises Microsoft SharePoint Server flaws and urges rapid patching, hunting and h...
GitHub brings AI security detections into pull request code scanning
GitHub's new public preview adds AI security detections to code scanning on pull requests for Code Security customers.
Microsoft's July security update fixes 622 flaws, including two already exploited
Microsoft's July 2026 security update fixes 622 flaws, including two vulnerabilities already exploited in the wild.
Mozilla fixes two critical Firefox flaws after public exploit code appears
Mozilla's Firefox 152.0.6 fixes two critical flaws after public exploit code appeared, though no in-the-wild attacks are...
GitHub gives Dependabot version updates a three-day default package cooldown
GitHub now delays Dependabot version update PRs by three days by default, while security fixes still open immediately.
GitHub brings Copilot security reviews into its desktop app
GitHub's Copilot app now has a public-preview /security-review command for scanning in-flight code changes.
Microsoft Entra ID will make passkeys the default authentication method
Microsoft will make passkeys the default in Entra ID and phase out native SMS and voice authentication delivery in 2027.
CISA and allies warn Russian FSB-linked actors are targeting vulnerable routers
CISA and allied agencies warn Russian FSB-linked actors are exploiting vulnerable routers across critical infrastructure...
Cloudflare launches Precursor to detect agentic bots across full web sessions
Cloudflare launched Precursor, a session-based bot detection feature for spotting automated and agentic behavior across ...
GhostLock Linux kernel flaw prompts urgent patch and livepatch rollouts
CloudLinux, Red Hat and CircleCI warn that GhostLock needs urgent Linux kernel patching on shared and containerized syst...
GitHub CodeQL 2.26.0 adds detection for AI system prompt injection
GitHub CodeQL 2.26.0 adds JavaScript and TypeScript detection for AI system prompt injection and expands SDK coverage.