Hackers used the secrets stolen in the recent Nx supply chain attack to publish over 6,700 private repositories publicly.

AWS has published further details of an incident involving one of its artificial intelligence development tools, which saw an unknown threat actor inject a malicious prompt into a source code ...

Google-owned security firm Mandiant has determined the root cause for the expanding breach of AI-powered marketing platform ...

Researchers have determined that two fake AWS packages downloaded hundreds of times from the open source NPM JavaScript repository contained carefully concealed code that backdoored developers' ...

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

PyPI module 'ctx' that gets downloaded over 20,000 times a week has been compromised in a software supply chain attack with malicious versions stealing the developer's environment variables. The ...

Amazon Web Services (AWS) has announced general availability of its machine-learning tool CodeGuru, which helps developers streamline applications and improve the quality of their code. The service ...

Amazon Web Services Inc. today announced the general availability of Amazon CodeCatalyst, the company’s unified software development service designed to reduce the time for development teams to build ...

Amazon announced the general availability of AWS Serverless Application Repository, a marketplace for developers to collaborate on building serverless applications. In serverless computing, developers ...