Hi, what are you looking for?
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
Many findings have been confirmed to be critical or high-severity vulnerabilities and the number will continue to increase.
More than 200 vulnerabilities patched in recent Chrome releases are marked as ‘reported by Google’.
Digital.ai’s latest threat report warns that agentic AI has erased the distinction between emerging and primary targets, enabling attackers to strike mobile apps within...
1Password says AI coding agents should never hold persistent secrets, introducing a just-in-time credential model for OpenAI Codex designed to keep credentials out of...
The researcher who found it says the vulnerability could have been chained with a prompt injection to exfiltrate data.
As enterprises rush AI projects into production, security teams are increasingly being forced into reactive mode.
Four vulnerabilities in OpenClaw can be chained together to steal credentials, escape the sandbox, and plant persistent backdoors.
Participants demonstrated exploits for Windows, Linux, VMware, Nvidia, and AI products.
Other noteworthy stories that might have slipped under the radar: Nvidia cloud gaming data breach, Android 17 security upgrades, FBI warning after ShinyHunters hacks...
Two employee devices were compromised in the attack, and credential material was stolen from OpenAI code repositories.
Independent benchmarking finds Mythos highly effective for source code audits, reverse engineering, and native-code analysis, though its exploit validation and reasoning capabilities remain inconsistent.
The goal of the guidance, which outlines minimum elements, is to help organizations enhance transparency in AI systems and supply chains.
The first exploitation attempts were observed less than four hours after the authentication bypass was publicly disclosed.
Microsoft’s MDASH discovered 16 of the Patch Tuesday vulnerabilities, and Palo Alto used Mythos to find dozens of flaws.
New “Sweet Attack” platform uses runtime intelligence and continuous agentic red teaming to identify exploitable attack chains human teams may miss.
The startup will invest in accelerating product development, hiring new talent, and expanding its customer base.
Curl’s lead developer says Mythos claims are marketing, but many in the industry believe the results stem from Curl’s robust security.
The zero-day was designed to bypass 2FA and it was developed by a prominent cybercrime group.
The company topped revenue and earnings forecasts for the first quarter of 2026, but its shares plunged more than 20%.
Hackers accessed one of the company’s AWS accounts and compromised AI provider secrets stored in Braintrust.