Disrupting supply chain attacks on npm and GitHub Actions
In the past year, there’s been a pattern of supply chain attacks that target weaknesses in package repositories and CI/CD systems to quickly spread malware to hundreds of open source projects. This malware seeks to exfiltrate credentials both to broadly spread the attack, as well
Developer Tools github_blog 2026-08-06T09:13:58.252302+00:00Read articleTame Dependabot: Group your updates, slow the cadence, keep security fast
If you maintain an active repository, you know the feeling. You open your notifications on a Monday morning and there they are: five, 10, sometimes a dozen Dependabot pull requests, each bumping a single dependency by a single patch version. Individually, every one of them is hel
Developer Tools github_blog 2026-08-06T08:13:46.780481+00:00Read articleStacked sessions and pull requests in the GitHub Copilot app
I want you to look at this screenshot for a moment from the GitHub Copilot app. It’s a small one, it’s got a lot of icons, and it tells the most glorious story that I’m really excited about.
This image is a set of stacked sessions. They’re a series of tasks in the same repository
Developer Tools github_blog 2026-08-06T07:13:46.114552+00:00Read articleDon’t stop early: Case-folding source code at memory speed
Suppose a user searches for café and your corpus contains CAFÉ, or they type straße and you’ve stored STRASSE. To make these count as matches, you need a canonical form that erases case distinctions, so that two strings which differ only in case compare equal. That form is case f
Developer Tools github_blog 2026-08-06T06:13:32.365501+00:00Read articleTurn one giant AI-generated pull request to a reviewable stack
Think about the last big feature you shipped. Be honest. Did you cram it into one giant pull request, or did you split it into smaller scoped pull requests? For years, you have silently had to decide between watching a pull request grow so large that reviewing it becomes a nightm
Developer Tools github_blog 2026-08-06T05:13:32.185721+00:00Read articleHow the GitHub legal team used Copilot CLI to streamline their workflows
Whether you are just starting out or are not in a technical role at all, you likely already have the skills you need to build your own tools. If you have ever thought “I’m not technical enough to build that,” this post is for you.
Let me introduce the team. We are lawyers, progra
Developer Tools github_blog 2026-08-06T04:13:21.863714+00:00Read articleTalos: Scaling rare disease diagnosis with automated, iterative genomic reanalysis
At a glance
Talos is an open-source tool for automated, iterative reanalysis of genomic data in rare disease. It efficiently re-examines stored sequencing data as scientific knowledge evolves and flags variants with newly actionable evidence.
Talos is tuned for a low false-positi
Research microsoft_research 2026-08-06T03:10:07.879132+00:00Read articleUnderstanding the brain with AI-driven explanations and experiments
At a glance
LLM-based models can predict the human brain’s responses to language with high accuracy. But what drives that performance is essentially unreadable: a vast collection of learned parameters, not scientific theories anyone can read.
Generative causal testing (GCT), deve
Research microsoft_research 2026-08-06T02:10:05.865537+00:00Read articleMemora: A Harmonic Memory Representation Balancing Abstraction and Specificity
At a glance
Today’s AI agents don’t remember past interactions. They must repeatedly be fed relevant information or retrieve it from external sources, which becomes less efficient as they handle longer and more complex tasks. To scale agent capabilities, we need a more efficient
Research microsoft_research 2026-08-06T01:10:12.662774+00:00Read articleSkillOpt: Agent skills as trainable parameters
At a glance
AI agents often fail because their instructions, or skills, are manually modified with no guarantee of improvement. SkillOpt turns skill editing into a training process, making agent behavior more reliable without changing model weights.
SkillOpt treats an agent skill
Research microsoft_research 2026-08-06T00:09:58.310257+00:00Read articleFlint: A visualization language for the AI era
At a glance
Polished charts from simple specs. Flint allows AI agents to reliably generate expressive, visually polished charts from simple, human-editable specifications.
Semantic types guide design. Flint leverages semantic data types to express meanings of data. They help the
Research microsoft_research 2026-08-05T23:10:04.128742+00:00Read articleAurora 1.5: Extending open foundation models for weather and Earth-system applications
At a glance
Aurora 1.5 is a major extension of Microsoft’s Aurora Earth System foundation model that adds 22 more weather variables relevant to energy, agriculture, transport, and climate risk, along with hourly temporal resolution and probabilistic ensemble forecasting.
Released
Research microsoft_research 2026-08-05T22:09:57.197691+00:00Read article