GitHub

GitHub adds AI to catch passwords before a code push

agentic AI, AI, code, credentials, cybersecurity, DevSecOps, GitHub, News /

GitHub adds AI to catch passwords before a code push 2026-10-08 at 12:02 By Anamarija Pogorelec GitHub has announced an AI detector, developed with Microsoft Applied Sciences, to help prevent developers from uploading passwords and other credentials to code repositories. The ModernBERT-based classifier will expand GitHub’s push protection, which checks code for secrets and can […]

GitHub adds AI to catch passwords before a code push Read More »

AI Agent Gateway: Open-source tool keeps credentials out of agent configs

agentic AI, Claude Code, Don't miss, GitHub, News, open source, software, Tuskira /

AI Agent Gateway: Open-source tool keeps credentials out of agent configs 2026-10-07 at 08:30 By Anamarija Pogorelec Tuskira’s AI Agent Gateway is an open-source solution that sits between AI agents and everything they call: the MCP tool servers that connect them to services like GitHub and Jira, and the model providers they send prompts to. […]

AI Agent Gateway: Open-source tool keeps credentials out of agent configs Read More »

Keyorix: Open-source secrets management for teams that can’t use SaaS

cybersecurity, data management, DevOps, DevSecOps, Don't miss, GitHub, Hot stuff, News, open source, software /

Keyorix: Open-source secrets management for teams that can’t use SaaS 2026-10-05 at 08:00 By Anamarija Pogorelec Keyorix is an open-source secrets manager that runs entirely on a company’s own servers. A secrets manager is the locked store where an application fetches the database passwords, API keys, and tokens it needs, so they stay out of […]

Keyorix: Open-source secrets management for teams that can’t use SaaS Read More »

500,000 Active Credentials Left Exposed on GitHub

Application Security, Data leak, Data Protection, GitHub, Identity & Access, secrets scanning, secrets sprawl /

500,000 Active Credentials Left Exposed on GitHub 2026-10-01 at 12:43 By Ionut Arghire Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default. The post 500,000 Active Credentials Left Exposed on GitHub appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

500,000 Active Credentials Left Exposed on GitHub Read More »

AI coding agents leaked 13,000 internal company screenshots to public GitHub repos

AI, code analysis, Don't miss, GitHub, Hot stuff, News /

AI coding agents leaked 13,000 internal company screenshots to public GitHub repos 2026-09-30 at 14:52 By Sinisa Markovic When developers ask AI coding agents to prove that a user interface fix works, some agents have been posting the evidence where anyone can find it, according to Glow Labs. Diagram showing how AI agents leak screenshots […]

AI coding agents leaked 13,000 internal company screenshots to public GitHub repos Read More »

OWASP Noir: Open-source static analysis tool

code analysis, cybersecurity, Don't miss, GitHub, News, open source, OWASP, software /

OWASP Noir: Open-source static analysis tool 2026-09-30 at 08:30 By Anamarija Pogorelec OWASP Noir is an open-source static analysis tool that reads an application’s source code and lists the endpoints it exposes: paths, HTTP methods, parameters, headers, and cookies, each tied to the file and line it came from. Here’s where it gets useful. Shadow […]

OWASP Noir: Open-source static analysis tool Read More »

GitHub’s AI agent found 24 Android app vulnerabilities

agentic AI, AI, Android, GitHub, News, vulnerability /

GitHub’s AI agent found 24 Android app vulnerabilities 2026-09-29 at 09:39 By Anamarija Pogorelec GitHub Security Lab researcher Kevin Stubbings built custom AI-driven audit workflows, called taskflows, on top of the lab’s open source Taskflow Agent, and used them to find and report more than 20 vulnerabilities in Android apps. Two of the disclosed bugs […]

GitHub’s AI agent found 24 Android app vulnerabilities Read More »

Hottest cybersecurity open-source tools of the month: September 2026

AI, cybersecurity, GitHub, News, open source, password manager, penetration testing, Tencent /

Hottest cybersecurity open-source tools of the month: September 2026 2026-09-29 at 07:30 By Anamarija Pogorelec Presented here is a curated selection of noteworthy open-source cybersecurity solutions that have drawn recognition for their ability to enhance security postures across diverse settings. Open-source secrets scanning tool Sift hunts credentials in Microsoft 365, Slack, and Jira Sift is […]

Hottest cybersecurity open-source tools of the month: September 2026 Read More »

NVIDIA wants AI agent safety enforced in silicon, not left to the agent

agentic AI, AI, cybersecurity, GitHub, News, NVIDIA, security controls /

NVIDIA wants AI agent safety enforced in silicon, not left to the agent 2026-09-28 at 18:22 By Anamarija Pogorelec NVIDIA has introduced an open software platform and a hardware-based reference design intended to keep AI agents within the limits set by the organizations that use them. The Open Agent Safety Platform includes OpenShell, software that […]

NVIDIA wants AI agent safety enforced in silicon, not left to the agent Read More »

Authorizer: Open-source authentication and authorization for your apps

authentication, cybersecurity, Don't miss, GitHub, News, open source /

Authorizer: Open-source authentication and authorization for your apps 2026-09-28 at 08:30 By Mirko Zorz Authorizer is an open-source server for sign-in and access control in web and mobile apps. Teams run it on their own infrastructure and keep user accounts in a database they choose. Its maintainers have built a permissions engine and an interface […]

Authorizer: Open-source authentication and authorization for your apps Read More »

Prismor: Open-source runtime control plane for AI agents

agentic AI, Don't miss, GitHub, News, open source, software /

Prismor: Open-source runtime control plane for AI agents 2026-09-23 at 08:30 By Anamarija Pogorelec Prismor is a free, open-source security layer for AI coding agents. It sits between an agent such as Claude Code, Codex, or Cursor and the actions that agent wants to take, and it checks each tool call against a policy before […]

Prismor: Open-source runtime control plane for AI agents Read More »

Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched

agentic AI, AI, Claude Code, Don't miss, GitHub, Hot stuff, News, vulnerability /

Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched 2026-09-18 at 11:49 By Sinisa Markovic Four major AI coding agents, Claude Code, Codex, GitHub Copilot and Gemini CLI, all share the same zero-click RCE vulnerability, one that could give an attacker the same reach into a company’s systems and data as the […]

Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched Read More »

Hardcoded MCP credentials found in public GitHub files

agentic AI, AI, credentials, cybersecurity, GitHub, identity protection, News, Non Human Identities /

Hardcoded MCP credentials found in public GitHub files 2026-09-18 at 08:30 By Anamarija Pogorelec Hardcoded API keys, access tokens and other credentials used by AI coding tools have been found in publicly accessible MCP configuration files on GitHub, according to research from Hush Security’s The State of MCP Configuration: The Identity Security Gaps report. The […]

Hardcoded MCP credentials found in public GitHub files Read More »

DeepZero: Open-source hunting for vulnerable Windows drivers

Don't miss, drivers, GitHub, News, open source, scanner, software, Windows /

DeepZero: Open-source hunting for vulnerable Windows drivers 2026-09-16 at 08:30 By Mirko Zorz DeepZero is an open-source engine that automates the search for exploitable Windows kernel drivers. You point it at a folder of binaries and it parses them, pulls them apart, scans them, throws most of them away, and asks a language model whether […]

DeepZero: Open-source hunting for vulnerable Windows drivers Read More »

Permify: Open-source authorization as a service

DevSecOps, Don't miss, GitHub, News, open source, software /

Permify: Open-source authorization as a service 2026-09-14 at 08:30 By Sinisa Markovic Permify is an open-source authorization service that answers access questions at run time: can user X view document Y, which posts can members of team Y edit. It keeps those rules in one place, apart from the application code that would otherwise carry […]

Permify: Open-source authorization as a service Read More »

AI-Infra-Guard: Open-source security scanner for AI systems

AI, Don't miss, GitHub, Hot stuff, LLMs, News, open source, red team, scanner, software, Tencent /

AI-Infra-Guard: Open-source security scanner for AI systems 2026-09-09 at 10:13 By Mirko Zorz Tencent’s Zhuque Lab built AI-Infra-Guard, an open-source security scanner for AI systems. It fingerprints running services such as Ollama, vLLM and ComfyUI and checks them against more than 1,600 known CVEs, inspects MCP servers and agent skills across 14 categories of risk, […]

AI-Infra-Guard: Open-source security scanner for AI systems Read More »

ToolHive: The open-source way to run any MCP server securely

AI, GitHub, News, open source, software /

ToolHive: The open-source way to run any MCP server securely 2026-09-07 at 08:30 By Anamarija Pogorelec ToolHive is an open-source platform that runs Model Context Protocol servers inside containers. An MCP server is the connector that lets an AI client like Cursor or Claude Code reach an outside tool, and Stacklok ships ToolHive under Apache […]

ToolHive: The open-source way to run any MCP server securely Read More »

Your threat feed is someone else’s database: What ingesting malware intel at scale takes

cybersecurity, DevSecOps, Don't miss, Expert analysis, GitHub, Hot stuff, News, opinion, Threat Intelligence /

Your threat feed is someone else’s database: What ingesting malware intel at scale takes 2026-09-03 at 08:30 By Help Net Security The advice is to consume shared threat intelligence. Join the ISAC. Wire the community feeds into your pipeline. This looks like a fine advice and I agree to it. What nobody mentions you is […]

Your threat feed is someone else’s database: What ingesting malware intel at scale takes Read More »

Open-source secrets scanning tool Sift hunts credentials in Microsoft 365, Slack, and Jira

Don't miss, GitHub, News, open source, penetration testing, software /

Open-source secrets scanning tool Sift hunts credentials in Microsoft 365, Slack, and Jira 2026-09-02 at 08:00 By Mirko Zorz Sift is a free, open-source command line tool that searches for passwords, API keys, and other sensitive data across the places a company keeps its work: local disks, Windows file shares, an entire Active Directory domain, […]

Open-source secrets scanning tool Sift hunts credentials in Microsoft 365, Slack, and Jira Read More »

Fake Claude Opus 5 app delivers malware and wipes its own tracks

Anthropic, Claude Code, GitHub, Malware, Morphisec, News /

Fake Claude Opus 5 app delivers malware and wipes its own tracks 2026-09-01 at 15:21 By Sinisa Markovic A malicious GitHub repository impersonating Anthropic and claiming to offer free access to “Claude Opus 5” is delivering RevStealer, Windows information-stealing malware that targets passwords, cryptocurrency wallet data and login credentials, according to Morphisec. Repository README using […]

Fake Claude Opus 5 app delivers malware and wipes its own tracks Read More »

Scroll to Top