Adversa AI published a technique on October 6, 2026, called Cryptographic Context Injection that exfiltrates a developer's .env.prod file — including API keys and database passwords — through GitHub C…
Panolayer launched a public beta for macOS that maps an entire codebase from source and checks every agent-made change against function signatures, docs, and caller usage to detect regressions in seco…
GitHub made local sandboxing generally available for GitHub Copilot across Copilot CLI, the GitHub Copilot app, and VS Code sessions using Agent Host, giving developers a secure execution boundary for…
GitHub Copilot CLI version 1.0.94-0 adds a /model command that discovers supported models from a running local Ollama instance alongside configured and GitHub Copilot cloud models. Discovery does not …
Researchers demonstrated a Cryptographic Context Injection technique that caused GitHub Copilot CLI to read local developer files and transmit their contents to an external server under specific autop…
Jotbus launched as a shared encrypted scratchpad that lets coding agents including Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot CLI, opencode, Windsurf, Claude Desktop, Qwen Code, Amp, Augme…
GitHub Copilot CLI contains a vulnerability that lets malicious web pages expose developer secrets via an attack method called Cryptographic Context Injection (CCI), which tricks the tool into decrypt…
Security researchers at Adversa AI found that GitHub Copilot CLI can be tricked into exfiltrating developer secrets via a technique called Cryptographic Context Injection (CCI), in which a malicious w…
Figma's remote MCP server returns HTTP 403 Forbidden to unlisted MCP clients because it allowlists the self-asserted client_name field sent during Dynamic Client Registration, a Figma staff member con…
GitHub launched computer use in public preview for GitHub Copilot CLI and the GitHub Copilot app on macOS and Windows, letting Copilot read accessible app content and visual context, click controls, e…
GitHub detailed how it packaged a large enterprise customer's migration and modernization toolkit as versioned GitHub Copilot plugins so internal and third-party engineering teams could apply shared a…
Lens K8S IDE 2026.10 shipped an Extension Marketplace that lets users create Kubernetes IDE extensions by describing them in natural language, with Claude Code, GitHub Copilot CLI, Gemini CLI, Codex C…
Agnostic-ai released v0.73.0, which now names each leftover output and how to remove it when a project runs sync with no .sync-state, replacing the previous silent pass (#1334, #1354, #1362). The rele…
Microsoft released Microsoft Execution Containers (MXC) SDK version 0.7.0 in public preview, a policy-driven OS-level execution layer for Windows and WSL that enforces JSON-declared filesystem, networ…
The Angular team has added Model Context Protocol (MCP) support to the Angular CLI via the `@angular/cli mcp` command, letting AI coding assistants query live workspace schemas and current angular.dev…
GitHub released Project HydraFusion, a research preview that routes GitHub Copilot CLI coding tasks across multiple models via three execution patterns — Single, Cascade, and Critique — instead of a s…
GitHub Copilot CLI now supports whole codebase indexing (WCI) for C++ code intelligence, using the Microsoft C++ Language Server to build a persistent symbol index across an entire project, including …
A developer released Methadone, an open-source tool that wraps agentic AI coding assistants such as Claude Code and GitHub Copilot CLI with a start-up timeout that grows based on how often and how lon…
A developer built ContextVeil, an open-source, local tool that strips selected secret values from coding agent tool output before it reaches the model's context. It uses deterministic, exact matching …
A developer built isitdone, an open-source hook for coding agents like Claude Code, Codex CLI, and Cursor that blocks an agent's completion claim unless the project's own test suite actually passes on…