GitHub Automatically Holds Suspicious Actions Runs, but Repository Owners Must Approve Them

GitHub now automatically holds suspicious Actions workflows in public repositories, but maintainers must still review ...
The Next Web

OpenAI ‘open-sourced’ its AI security scanner. The scanner is still locked up.

OpenAI open-sourced its Codex Security CLI to scan code for bugs, but kept the scanner gated. An AppSec land grab, and a shot at Anthropic’s Claude Security.
SecurityWeek

Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day

Hackers have been exploiting a critical OS injection vulnerability in Arista VeloCloud Orchestrator as a zero-day.

Arista patches VeloCloud Orchestrator zero-day exploited in attacks

Arista has patched a maximum-severity command injection vulnerability in on-premises VeloCloud Orchestrator deployments that ...
InfoQ

Netflix Details its In-House LLM Serving Platform with Triton and vLLM

Netflix has described the production lessons behind bringing LLM inference into its internal serving platform, including the ...