Application Security
Analysis found 434 exploitable flaws in AI-generated apps, with denial-of-service, authorization and secrets exposure risks among the most common issues.
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Join the live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as...
Artificial Intelligence
Rapid7 warns that traditional patch cycles cannot keep pace with soaring vulnerability disclosures and faster exploitation, forcing defenders to prioritize exposure over severity scores.
Artificial Intelligence
Xpander’s platform uses a universal agent harness that executes AI agents as portable workloads and securely renders interfaces on demand.
Artificial Intelligence
The AI security testing firm has shared information on a recently disclosed incident involving Anthropic AI models.
Artificial Intelligence
OpenAI says its AI models went rogue, as CISOS call the incident a watershed moment, warning that autonomous AI threat models have officially crossed...
Artificial Intelligence
The open-weight Antares models are designed to pinpoint known vulnerabilities in codebases faster and at a fraction of the cost of larger AI models.
Artificial Intelligence
Neo raised money across seed and Series A funding rounds from Andreessen Horowitz, Bessemer Venture Partners, and others.
Artificial Intelligence
(Video) Artificial intelligence is transforming cybersecurity, but are governance, compliance, and security practices evolving fast enough to keep up?
Artificial Intelligence
AI infrastructure introduces new security risks that traditional data center designs were never built to handle.
Artificial Intelligence
An attacker can create a malicious repository containing a git.exe in the project root, and Cursor executes it automatically.
Artificial Intelligence
The new program stems from an AI-focused Executive Order signed by President Trump on June 2.
Artificial Intelligence
A ClaudeBleed-linked vulnerability reportedly persists across eight patches, exposing potentially sensitive data to other extensions.
Artificial Intelligence
Researchers demonstrate adversarial hallucination squatting against popular AI assistants to achieve remote code execution.
Artificial Intelligence
Two announcements on July 7, 2026, demonstrate the government’s determination to improve the level of cybersecurity within the UK.
Artificial Intelligence
Wiz has disclosed the details of a new AI coding assistant attack method it has dubbed GhostApproval.
Artificial Intelligence
The "Rogue Agent" vulnerability could have enabled attackers to silently manipulate AI conversations, exfiltrate data, and compromise every Dialogflow CX agent within the same...
Artificial Intelligence
Researchers show how attackers can use a crafted public GitHub Issue to trick AI-powered workflows into exposing data from private repositories without authentication.
Artificial Intelligence
The audits are reportedly being spearheaded by CISA’s Attack Surface Evaluation team, a specialized unit tasked with conducting digital defense assessments and simulated hacking...
Artificial Intelligence
Researchers uncovered two campaigns embedding indirect prompt injections in malicious websites to exploit autonomous AI agents browsing the web.
Artificial Intelligence
Attack demonstrates how LLM agents can combine known exploitation techniques with real-time reasoning to automate complex, multi-stage intrusions.
Artificial Intelligence
The DuneSlide vulnerabilities enable zero-click prompt injection attacks that escape Cursor's sandbox and execute arbitrary code on the underlying operating system.
Artificial Intelligence
As AI-generated code becomes commonplace, CISOs need new audit strategies to measure developer practices, govern AI tool usage, and identify software risks before they...
Artificial Intelligence
Anthropic said Tuesday night that its AI model called Claude Fable 5 is now widely available.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)