A planted AGENTS.md file tricked OpenAI’s Codex into installing malware, exposing a risk for AI coding agents that act on ...

AI ban: the moderators bar AI projects and add rules that shut out solo maintainers and non-English speakers from sharing ...

Witness, an open source software supply chain tool, signs each build step and fails artifacts that break a signed policy.

TransUnion explores synthetic identity fraud risks, AI-driven scams and account takeovers that threaten customer trust and ...

Dormant AI agents retain credentials and system access, exposing companies to unsecured triggers and sensitive data security ...

Fortinet released updates for FortiOS, FortiManager, FortiAnalyzer, FortiMail, FortiAuthenticator, without disclosing vulnerability details.

Anthropic details Claude Duet security safeguards, covering user approvals, sensitive data checks, passwords and browser isolation.

Google open-sourced the Elephant-Goldfish Model plugin, which makes stateless AI sessions attack a design doc before any code ...

Open source AI slop hits large projects hardest, a Linux Foundation survey finds, and their maintainers now rank burnout as the top concern.

Stellar Cyber’s ISOC platform connects data, AI, investigation and response to unify security operations for lean teams and ...

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: A critical PHP security ...

Google is updating Chrome’s Enhanced Protection mode to detect scam websites and warn users when a page tricks them into copying a malicious command. The company introduced Enhanced Protection for ...