Cursor flaw lets extensions steal API keys and session tokens without user interaction, according to researchers at LayerX ...

A survey by Akamai raises issues around API security and equates the issue with the rise of agentic AIs placing demand on API ...

A hardcoded ClickUp API key exposed hundreds of corporate and government emails for over a year, raising new SaaS security ...

Red Hat principal engineer and OpenClaw maintainer Sally O'Malley released Tank OS—a tool that sandboxes AI agents in ...

Oracle NetSuite, the #1 AI cloud ERP, today announced new NetSuite knowledge packages for AI coding agents that will help customers and partners accelerate and de-risk the creation of NetSuite ...

Connecting an LLM to your proprietary data via RAG is a massive liability; without document-level access controls, your AI is ...

Run a quick self-audit against 10 warning signs that your authentication stack has critical vulnerabilities. Each sign includes a diagnostic check, an explanation of why it's dangerous, and a concrete ...

Indirect prompt injection attacks, where malicious instructions are hidden in content AI systems process, have been identified by OWASP as the leading security risk for large language models. These ...

Hackers don’t break in. They log in.

Machine identities are the primary attack surface; governance must shift from user-centric models to trust-based, ...

Autonomous SOC agents now shipping can rewrite firewall rules and modify IAM policies — outpacing the governance frameworks ...

The MCP flaw reveals a systemic AI security gap, exposing enterprise systems to supply chain attacks and forcing a shift ...