Krebs on Security

‘Trojan Source’ Bug Threatens the Security of All Code

Virtually all compilers — programs that transform human-readable source code into computer-executable machine code — are vulnerable to an insidious attack in which an adversary can introduce targeted ...
techtimes

Detecting Sensitive Data Leaks in Source Code: Ziyu Wang’s Machine Learning Approach to Securing Modern Development Pipelines

The widespread adoption of open-source and enterprise software has accelerated development velocity but also expanded the attack surface. Among the most pressing concerns is the unintentional exposure ...
Hosted on MSN

This wild AI tool rips off open source code without breaking copyright

In early 2025, a class-action lawsuit against GitHub, Microsoft, and OpenAI over Copilot’s use of open-source training data was still grinding through federal court. By spring 2026, the case remains ...
ZDNet

Sure, GitHub's AI-assisted Copilot writes code for you, but is it legal or ethical?

GitHub Copilot, Microsoft's AI pair-programming service, has been out for less than a month now, but it's already wildly popular. In projects where it's enabled, GitHub states nearly 40% of code is ...
The Next Web

GitHub Copilot works so well because it steals open-source code and strips credit

The Software Freedom Conservancy (SFC), a non-profit community of open-source advocates, today announced its withdrawal from GitHub in a scathing blog post urging members and supporters to rebuke the ...