As AI agents become more autonomous, strong identity, access, and auditing controls are critical to keeping them secure.

SonicWall says attackers are exploiting two SMA 1000 zero-days, including a code injection flaw that could enable ...

Are AI-generated passwords truly random? Research suggests AI passwords are far less secure than you might think.

Microsoft Threat Intelligence identified threat actor activity with overlapping tradecraft commonly associated with ...

Multiple threat actors are abusing the GitHub API to discover organizations’ repositories and members via ghost accounts.

Rome-based investigative reporter Erika Kinetz and colleagues produced a multi-format package showing how American ...

When Ying Zhang was a doctoral student at Virginia Tech, she spent years learning to think like an attacker—probing software ...

New VentureBeat survey data: 69% of enterprises share AI agent credentials, letting one compromised agent inherit the access ...

GitHub ghost accounts and exposed PATs scrape corporate orgs through the API, with select cases cloning private repos.

Researchers have uncovered a sustained campaign using GitHub's public APIs and ghost accounts to profile enterprise software ...

There’s a version of API testing that most teams start with: write a request, add a status code assertion, call it done. That approach covers one narrow category of the types of API testing that exist ...

Oliver Sild, founder of Patchstack WordPress security company, shared concerns about the security of AI API keys in WordPress 7.0, sharing that there “will be an absolute rush by hackers to steal API ...