As AI agents become more autonomous, strong identity, access, and auditing controls are critical to keeping them secure.

Five malicious versions of AsyncAPI packages were published to the Node Package Manager (npm) in a supply-chain attack that ...

Are AI-generated passwords truly random? Research suggests AI passwords are far less secure than you might think.

Microsoft Threat Intelligence identified threat actor activity with overlapping tradecraft commonly associated with ...

Multiple threat actors are abusing the GitHub API to discover organizations’ repositories and members via ghost accounts.

Rome-based investigative reporter Erika Kinetz and colleagues produced a multi-format package showing how American ...

When Ying Zhang was a doctoral student at Virginia Tech, she spent years learning to think like an attacker—probing software ...

New VentureBeat survey data: 69% of enterprises share AI agent credentials, letting one compromised agent inherit the access ...

GitHub ghost accounts and exposed PATs scrape corporate orgs through the API, with select cases cloning private repos.

Ethereum researchers are using AI agents to hunt for vulnerabilities, shifting security work from finding bugs to proving ...

Researchers have uncovered a sustained campaign using GitHub's public APIs and ghost accounts to profile enterprise software ...

The White House recently endorsed monitoring sewage for evidence of drug use. Critics fear such efforts could violate privacy and stigmatize neighborhoods. The White House recently endorsed monitoring ...