GitHub Brings Stacked Pull Requests Out of the Shadows - DevOps.com

GitHub introduces native stacked pull requests, helping development teams break large changes into smaller, dependency-ordered PRs that are faster and easier to review.

devops.com

Unauthenticated Arbitrary File Read can lead to RCE

### Summary An unauthenticated remote attacker can submit Org-mode markup containing a #+INCLUDE directive to POST /{owner}/{repo}/markup for any suitable public repository to read arbitrary se...

github.com

GitHub - boldsoftware/meat: meat.dev

meat.dev. Contribute to boldsoftware/meat development by creating an account on GitHub.

github.com

GitHub - microsoft/skill-recorder: Desktop app that records your on-screen work session and uses the GitHub Copilot CLI to reconstruct it as an intent + ordered steps, then builds a reusable Skill or ...

Desktop app that records your on-screen work session and uses the GitHub Copilot CLI to reconstruct it as an intent + ordered steps, then builds a reusable Skill or Automation for Microsoft Scout, ...

github.com

GitHub - ggalloro/github-pr-reviewer: Pull request reviews by a Gemini managed agent from GitHub Actions, with pluggable review skills

Pull request reviews by a Gemini managed agent from GitHub Actions, with pluggable review skills - ggalloro/github-pr-reviewer

github.com

GitHub - microsoft/kompli: The Linux native compliance and hardening engine. CIS, STIG, and custom baselines - audit, remediate, report.

The Linux native compliance and hardening engine. CIS, STIG, and custom baselines - audit, remediate, report. - microsoft/kompli

github.com

Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident

We’re on a journey to advance and democratize artificial intelligence through open source and open science.

huggingface.co

Creating Autonomous Teams Agents Using OpenClaw, MCP, and Azure Container Apps | Microsoft Community Hub

The one shift that changes everything For two years, "AI coding" meant autocomplete. A suggestion appears in your editor, you hit tab, you move on. The agent...

techcommunity.microsoft.com

Industry Leaders Unite in Open Secure AI Alliance for AI Safety and Security

NVIDIA and founding members form new alliance to build and share open tools that promote responsible use of and trust in AI.

blogs.nvidia.com

GitHub - ards-project/ard-spec: Agentic Resource Discovery (ARD) specification

Agentic Resource Discovery (ARD) specification. Contribute to ards-project/ard-spec development by creating an account on GitHub.

github.com

PostgreSQL Extension Catalog

Search PostgreSQL extensions, package families, dependencies, and exact PG/OS availability.

pgext.cloud

GitHub - aws-bench/aws-bench: aws-bench measures how well AI agents and model combinations perform on real AWS work — diagnosing misconfigurations, provisioning infrastructure, and operating live clou...

aws-bench measures how well AI agents and model combinations perform on real AWS work — diagnosing misconfigurations, provisioning infrastructure, and operating live cloud environments. - aws-bench...

github.com

6 security settings every GitHub maintainer should enable this week

These six free settings will not make your project unhackable. Nothing will. What they will do is close the easy doors.

github.blog

Changelog | Microsoft Developer

Unified changelog featuring updates for Azure, GitHub, and Microsoft developer tools. Explore new features, fixes, and improvements in one place.

developer.microsoft.com

MEG Case Study #N008: OpenAI ExploitGym Incident - Autonomous Sandbox Escape and Hugging Face Breach

meg-initiative.org

GitHub - jfrog/boost: Save tokens. Maximize context, Safely

Save tokens. Maximize context, Safely. Contribute to jfrog/boost development by creating an account on GitHub.

github.com

When Your AI Reviewer Works for the Attacker: A Confused-Deputy Bug in Microsoft's Azure DevOps MCP Server - Manifold Security

Hidden text in an Azure DevOps pull request description turns a developer's AI agent against them, reaching projects the attacker has no access to. Vertical

manifold.security

OpenSSL HollowByte: A DoS Hiding in 11 Bytes

Every so often, a vulnerability reminds us how deeply our digital infrastructure relies on foundational libraries. Recently, the Okta Red Team discovered

sec.okta.com

Security incident disclosure — July 2026

We’re on a journey to advance and democratize artificial intelligence through open source and open science.

huggingface.co

Azure Visio Stencil Pack: 1,764 Microsoft Azure Icons for Visio

Free Azure Visio stencil pack: 1,764 Microsoft Azure icons for Visio with working shape search, connection points and shape data, in Metric and US units. A drop-in alternative to Microsoft’s SVG-only ...

xeeva.github.io