Breaches, advisories and vendor security posture.
An Omdia report from February 2026 found that 77% of organizations experienced supply chain incidents in the prior 12 months, with AI technology ranked as the top risk and 35% reporting stolen developer credentials.
GitLab's AI-powered code review tool identifies broken object and function level authorization, business logic errors, and other vulnerabilities before merge, now in public beta.
Dependency Scanning Auto-Remediation resolves one in eight breaking changes automatically across build ecosystems, with an improved fingerprinting algorithm reducing duplicate vulnerability tracking by 43%.
GitHub's advisory database now ingests malware reports from OpenSSF's malicious-packages repository, extending coverage beyond npm to Python, Java, Ruby, .NET, Go, Rust, and PHP.
A joint advisory from the FBI, CISA, NSA and partners documents the group's exploitation of Fortinet flaws, double-extortion tactics, and evolution from targeted attacks to affiliate-based operations.
Johnson Controls, ABB and Acrisure systems face multiple vulnerabilities ranging from hardcoded credentials to unauthenticated arbitrary code execution.
