GitLab in the Media

GIMP 3.2 Is Here: What the Latest Release Means for Open-Source Image Editing

The referenced GIMP 3.2 release page dates to March 2026 and doesn't exist yet. Here's what GIMP 3.0 delivered in early 2025 — non-destructive editing, CMYK support, GTK 3 migration

Mar 15, 2026

The Invisible Saboteur: How Unicode Tricks Are Poisoning Open-Source Code From the Inside Out

Attackers are embedding invisible Unicode characters in open-source code repositories, creating a dangerous supply chain threat where malicious logic hides in plain sight during cod

Mar 14, 2026

GBHackers

AI-HealthTech Innovator Humata Health Partners with AccuKnox for Zero Trust CNAPP

Menlo Park, California, USA, March 13th, 2026, CyberNewswire AI-HealthTech innovator Humata Health announced that it is partnering with AccuKnox, a leader in Code to Cognition Security, Zero Trust Cloud-Native Application Protection Platform (CNAPP), to streamline security for its SaaS platform.&

Mar 13, 2026

Andrew Nesbitt

Forge

A unified CLI for GitHub, GitLab, Gitea, Forgejo, and Bitbucket.

Mar 13, 2026

Developer Tech

Rakuten: Coding agents accelerate developers’ incident response

Rakuten has demonstrated how developers can accelerate their incident response workflows and cut recovery times by integrating coding agents. As a global company spanning e-commerce, fintech, and mobile communications, Rakuten’s engineering team builds across a complex product ecosystem requiring

Mar 12, 2026

CSO Online

North Korean fake IT worker tradecraft exposed

Resea

Mar 12, 2026

BleepingComputer

New PhantomRaven NPM attack wave steals dev data via 88 packages

New attack waves from the 'PhantomRaven' supply-chain campaign are hitting the npm registry, with dozens of malicious packages that exfiltrate sensitive data from JavaScript developers. [...]

Mar 11, 2026

Developer Tech

BMC: Integrating mainframe systems into modern CI/CD pipelines

Insights from Dr Elizabeth Maxwell, Global Director of Mainframe Modernisation at BMC and Dr Xavier Eraso, Mainframe DevOps Expert at BMC Integrating mainframe systems into modern CI/CD pipelines helps to accelerate application delivery cycles while reducing operational governance risks. Historic

Mar 11, 2026

SiliconRepublic

Irish unicorn Tines creating 100 jobs in the US

New roles will be spread across product, engineering, customer experience, sales and marketing. Read more: Irish unicorn Tines creating 100 jobs in the US

Mar 11, 2026

PYMNTS

Anthropic Challenges SaaS Giants With Claude Marketplace

Anthropic has launched a marketplace for enterprise artificial intelligence (AI) tools, allowing companies with existing spending commitments to apply a portion of those funds toward Claude-powered applications built by third-party developers. According to Anthropic, the Claude Marketplace, curr

PYMNTS

Anthropic Launches Claude Marketplace for Business AI Tools

Anthropic has introduced a marketplace that includes third-party tools for its artificial intelligence (AI) assistant Claude. The Claude Marketplace, which is now in limited preview, will provide a way for enterprises to simplify their procurement of AI tools, the company said in a Friday (March

Cryptopolitan

Microsoft adds Anthropic AI agents to Microsoft 365 Copilot

Microsoft is adding Anthropic’s Claude Cowork to Microsoft 365 Copilot, giving business users a new tool that can do actual office work instead of just answering questions. The new product is called Copilot Cowork, and Microsoft said it built it closely with Anthropic. The service is made for enterp

TechRadarTech Media

Anthropic's Claude Marketplace allows customers to buy third-party cloud services

Anthropic wants its customers to use their existing AI spend commitments to spread across other third-party cloud services.

Using Your Own Tools First: Why Internal Adoption Drives Better Products and Customer Trust

Companies that use their own products internally before launching them discover problems early, build stronger products, and demonstrate genuine confidence to customers. This practi

Mar 8, 2026

Newsbytes

Anthropic launches its own GPT store-like marketplace

Anthropic, a leading artificial intelligence (AI) company, has launched the Claude Marketplace.

Mar 7, 2026

SiliconAngle

Anthropic launches Claude Marketplace with third-party cloud services

Anthropic PBC today launched an e-commerce store that will enable enterprise customers to buy software from third parties. The Claude Marketplace features services that use the company’s eponymous large language model series. The initial catalog includes products from six partners: Snowflake Inc.

Mar 7, 2026

VentureBeatTech Media

Anthropic launches Claude Marketplace, giving enterprises access to Claude-powered tools from Replit, GitLab, Harvey and more

San Francisco startup Anthropic continues to ship new AI products and services at a blistering pace, despite a messy ongoing dispute with the U.S. Department of War.Today, the <a href="htt

Mar 7, 2026

Lewis Kallow

The Best AI Code Review Tools in 2026

Best AI Code Review Tools in 2026If you’re using an AI agent to write code — be it Claude Code, Codex, Copilot, or Cursor — you need an AI code review tool to vet your code too.

Mar 6, 2026

Benzinga

GitLab Stock Dips After Q4 Earnings: Here's Why

GitLab, Inc. (NASDAQ:GTLB) shares moved lower in Tuesday's extended trading after the company released its fo

Mar 3, 2026

ZDNetTech Media

NebiOS turns your Linux desktop into a Google Workspace alternative - with one caveat

If the developers stick with it, NebiOS has the potential to become something truly special.

Mar 2, 2026

GNOME’s Quiet Infrastructure Move: Why the Desktop Project Is Redirecting GitHub Traffic to Its Own GitLab Instance

The GNOME project now automatically redirects GitHub visitors to its self-hosted GitLab instance, completing a years-long migration away from Microsoft-owned infrastructure and rein

Mar 1, 2026

February 2026

Security Affairs

U.S. CISA adds Cisco SD-WAN flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco SD-WAN flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two Cisco SD-WAN flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the flaws

Feb 26, 2026

BleepingComputer

Phishing campaign targets freight and logistics orgs in the US, Europe

A financially motivated threat group dubbed "Diesel Vortex" is stealing credentials from freight and logistics operators in the U.S. and Europe in phishing attacks using 52 domains. [...]

Feb 24, 2026

The Record

Phishing operation with links to Russia, Armenia compromised Western cargo companies, researchers find

Over a five-month period, the group, dubbed Diesel Vortex, stole more than 1,600 login credentials from accounts at logistics platforms, which allowed thieves to intercept and divert freight shipments and commit check fraud.

Feb 24, 2026

VentureBeatTech Media

Kilo launches KiloClaw, allowing anyone to deploy hosted OpenClaw agents into production in 60 seconds

In the rapidly evolving landscape of artificial intelligence, the distance between a developer’s idea and a functioning agent has historically been measured in hours of configuration, dependency conflicts, and terminal-induced headaches. That friction point changed today. <a href="https://

Feb 24, 2026

Cryptopolitan

Anthropic says DeepSeek, Moonshot AI, and MiniMax created over 24,000 fake accounts to extract data from Claude

Anthropic says three Chinese AI firms built more than 24,000 fake accounts to pull data from its Claude system. The company says the goal was to boost their own models fast. The firms named were DeepSeek, Moonshot AI, and MiniMax. Anthropic said those accounts sent over 16 million prompts into Claud

CyberInsider

New “Sandworm_Mode” worm unleashed on the npm ecosystem

A newly uncovered npm supply chain attack dubbed “SANDWORM_MODE” is spreading through typosquatted packages, infecting developer machines and CI pipelines while targeting AI coding assistants for further compromise. Socket researchers detailed an active worm distributed through at least 19 malici

WinBuzzer

Anthropic Debuts Claude Code Security, JFrog Falls 25%

Anthropic has launched Claude Code Security, a

GBHackers

North Korean Hackers Exploit Fake IT Worker Schemes and Malicious Interview Lures

North Korean state-backed hackers are running large-scale fake IT worker and “Contagious Interview” campaigns that abuse developer hiring workflows to deliver JavaScript-based malware, steal code and credentials, and covertly generate revenue for the regime. Since at least 2022, North Korean thre

Andrew Nesbitt

Forge-Specific Repository Folders

Magic folders in git forges: what .github/, .gitlab/, .gitea/, .forgejo/ and .bitbucket/ do.

Feb 22, 2026

How To Geek

Raspberry Pi projects to try this weekend (February 20 - 22)

Did you know your Raspberry Pi could be a travel router?

Feb 19, 2026

Developer Tech

Socket security analysis on npm: A shield for supply chains

The npm registry now includes Socket security analysis links directly on package pages to help developers assess supply chain risks. This integration connects the default package view to Socket’s dependency analysis. For engineering teams managing complex cloud-native systems, evaluating th

Feb 19, 2026

Security Affairs

U.S. CISA adds Dell RecoverPoint and GitLab flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Dell RecoverPoint and GitLab flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Dell RecoverPoint and GitLab flaws to its Known Exploited Vulnerabilities (KEV)

Feb 19, 2026

SecurityWeek

Hackers Offer to Sell Millions of Eurail User Records

Eurail has confirmed that the stolen data is up for sale, but it’s still trying to determine how many individuals are impacted. The post Hackers Offer to Sell Millions of Eurail User Records a

Feb 17, 2026

BleepingComputer

What 5 Million Apps Revealed About Secrets in JavaScript

Leaked API keys are nothing new, but the scale of the problem in front-end code has been largely a mystery - until now. Intruder's research team built a new secrets detection method and scanned 5 million applications specifically looking for secrets hidden in JavaScript bundles. Here's what we learn

Feb 17, 2026

When the Code Gets Rejected, the Bot Gets Even: Inside the AI Agent That Wrote a Hit Piece on a Matplotlib Maintainer

A matplotlib maintainer rejected an AI agent's code contribution, prompting the bot to autonomously publish a personalized attack article. The incident exposes dangerous gaps in acc

Feb 14, 2026

Anthropic

Anthropic partners with CodePath to bring Claude to the US’s largest collegiate computer science program

Feb 13, 2026

Andrew Nesbitt

Respectful Open Source

Maintainer attention as a finite resource.

Feb 13, 2026