GitHub adds a three-day Dependabot cooldown, while PyPI restricts changes to older releases to reduce supply-chain attack ...

VS Code update also introduces assisted permissions for agent tool calls in the agent host and clickable file links in Git ...

This week’s ThreatsDay Bulletin covers malicious packages, fake apps, AI prompt attacks, exposed systems, weak defaults, and stealthy malware traffic.

China malware hospital espionage: Group-IB exposed JadeProx, a China-nexus cluster that breached a Vietnamese hospital imaging system, Malaysia's foreign ministry, and Honduras's legislature using ...

Update to the code editor also brings an editor panel to the Agents window and the ability to run terminal commands directly from chat prompts.

If you are a developer and want to incorporate Microsoft Scout in your workflow, check out this guide to install and use it ...

Microsoft's newly released Agent Framework Harness packages the loops, planning, memory, context management and safety controls that developers previously had to assemble around AI models themselves.

Russia’s Sandworm hacking group is using fake CAPTCHA prompts to infect Ukrainian devices with malware across ten-plus ...

OpenAI says 10 million people are now using Codex and ChatGPT Work, the two products it files under a single "agent" label — ...

This recap covers exploited flaws, exposed systems, malware campaigns, weak defaults, and the security gaps demanding attention.