Codex Security, formerly Aardvark⁠, has found hundreds of critical vulnerabilities in tested software in the past month.

Google's latest threat report warns that third-party tools are now prime targets for attackers - and businesses have just days to keep them secure.

Researchers have found that LLM-driven bug finding is not a drop-in replacement for mature static analysis pipelines. Studies comparing AI coding agents to human developers show that while AI can be ...

The Russian state-sponsored APT28 threat group is using a custom variant of the open-source Covenant post-exploitation framework for long-term espionage operations. Researchers at cybersecurity ...

Hackers are increasingly exploiting newly disclosed vulnerabilities in third-party software to gain initial access to cloud environments, with the window for attacks shrinking from weeks to just days.