GitHub announced that AI Scan for pull requests now runs on repositories without CodeQL default setup enabled, removing the previous requirement that CodeQL default setup be configured. The change is …
GitHub released a public preview of REST API endpoints that let organizations and repositories manage AI Scan for pull requests, available on github.com for GitHub Advanced Security customers. The new…
A new guide highlights AI-driven security tools that scan codebases and dependencies continuously, addressing the 81% of critical vulnerabilities exploited in 2025 that had known fixes for over 60 day…
Wiz's autonomous AI agent Red Agent discovered and exploited a GitHub Actions script injection vulnerability in Snowflake's CI/CD pipeline, exfiltrating internal Jira access credentials just five days…
A developer's comparison of six enterprise Software Composition Analysis (SCA) tools in 2026 highlights Aikido Security as the strongest all-around pick for teams seeking SCA without a six-figure line…
A developer describes the shift in application security from merely detecting vulnerabilities to automatically fixing them, enabled by AI agents that can reproduce bugs, write tests, and iterate on pa…
Aikido's 2026 State of AI in Security & Development report finds nearly 70% of organizations uncovered flaws tied to AI-generated code, with 1 in 5 reporting serious incidents linked to AI code. Engin…
GitHub code scanning now surfaces AI-powered security detections directly on pull requests, expanding vulnerability coverage to languages and frameworks not currently supported by CodeQL. The feature,…
GitHub launched agentic autofix in public preview for code scanning alerts, enabling Copilot to explore codebases, propose fixes, and validate them with CodeQL before opening pull requests. The featur…
Microsoft announced the limited public preview of Copilot Autofix for GitHub Advanced Security for Azure DevOps, extending AI-powered vulnerability remediation to teams using Azure Repos. The tool aut…
A developer lost $12,000 in fraudulent Stripe charges after an AI agent hardcoded an API key into a public GitHub commit. The incident highlights the risk of giving LLMs direct access to codebases via…