Security
Apple Fixes iOS Bug Exploited by FBI to Access Signal Messages
Apple patched a security flaw that let the FBI extract Signal message previews via iPhone notifications, even after the app was deleted.
Paxos Unveils $1M Bug Bounty Program Covering PYUSD, PAXG, USDG Smart Contracts
Paxos launches $1 million bug bounty on Cantina platform, covering all major stablecoin and gold token contracts plus Web2 infrastructure in security push.
GitHub Expands Push Protection Controls to Repository Level
GitHub now allows developers to manage secret scanning push protection exemptions directly from repository settings, bypassing organization-level configurations.
GitHub Adds 28 Secret Detectors Including Snowflake and Vercel API Keys
GitHub's March 2026 secret scanning update adds 28 new detectors from 15 providers, enables push protection for 39 patterns, and adds validity checks for DeepSeek and npm tokens.
GitHub Upgrades Secret Scanning with Enterprise-Wide Metadata Controls
GitHub's extended metadata checks now deployable at scale through security configurations, auto-enabling for repos with validity checks already active.
OpenAI Addresses Mixpanel Security Incident Impacting API Data
OpenAI discloses a security incident involving Mixpanel, affecting limited API user data. No sensitive information such as API keys or payment details were exposed.
CodeQL 2.23.5 Enhances Swift 6.2 Support and Introduces New Java Security Queries
GitHub's CodeQL 2.23.5 update enhances Swift 6.2 support, introduces new Java security queries, and improves code analysis accuracy, offering developers better tools for code scanning.
Anthropic Tightens Restrictions on AI Sales to Certain Regions
Anthropic updates its terms to restrict AI sales and usage in regions with potential security risks, emphasizing democratic interests and AI safety.
Kiln Security Breach Highlights Risks in External Staking Infrastructure
The recent Kiln incident underscores the vulnerabilities in using external staking providers, as sophisticated attackers bypassed existing security measures, prompting a reevaluation of staking solutions.
Immunefi CEO Warns of Urgent Security Needs in Stablecoin Sector
Immunefi CEO Mitchell Amador discusses the urgent need for enhanced security in the rapidly growing stablecoin sector as vulnerabilities pose significant risks.