ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't ...

Spring AI enterprise Java is now in production, but agent security is the next crisis: UberConf 2026 opens today in Denver ...

There have been detection problems in the area of cybersecurity all along. Alert generation overwhelms the security teams, vulnerability discovery occurs much faster than vulnerability fixing, and ...

AI coding assistants can speed up bounded tasks, but research shows security and review risks rise in complex codebases.

Attackers exploited Langflow vulnerability CVE-2025-3248 to conduct an agentic AI-powered ransomware attack involving reconnaissance, credential theft, and lateral movement.

Researchers claimed to have uncovered what may be the first ransomware attack to be conducted by an AI agent. Dubbed ...

Armored Likho BusySnake Stealer, a Python-based infostealer first disclosed by Kaspersky, is actively targeting government ...

In May, IBM promised to fix open source software at scale. Now we know what that actually looks like.

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your security tools look.

OpenAI has expanded its Daybreak security effort with new tools and partnerships to speed up software patching. The effort includes a Codex Security plugin release and the full launch of GPT‑5.5‑Cyber ...

Nothing broke, so I never looked.

Anaconda has acquired Kilo Code, an open-source, model-agnostic platform that embeds AI agents into the tools developers use to build software. The deal brings Kilo’s community of more than three ...