As Google reports AI misuse by state actors, Microsoft and Tenable highlight visibility and identity gaps inside fast-growing agent ecosystems.

Google API keys for services like Maps embedded in accessible client-side code could be used to authenticate to the Gemini AI ...

Malicious StripeApi.Net package on NuGet mimicked Stripe.net, logged 180,000 downloads, and stole Stripe API tokens before removal.

A developer-targeting campaign leveraged malicious Next.js repositories to trigger a covert RCE-to-C2 chain through standard ...

Claude Code flaws allow remote code execution and API key theft via untrusted repositories; three bugs fixed across 2025–2026 ...

AI API calls are expensive. After our always-on bot burned through tokens, we found seven optimization levers that cut costs ...

Shanon is an open source AI pentester built on the Claude SDK; runs cost about $60 in API credits, with CI/CD support; ...

Microsoft has announced that the Microsoft Agent Framework has reached Release Candidate status for both .NET and Python. This milestone indicates that the API surface is stable and feature-complete ...

Almost a year after the launch of the GSA’s signature tech-buying initiative, agency IT leaders still support cheaper, streamlined products. But a debate continues over the program’s long-term payoff.

Fully airgapped assessment platform with 608 evidence schemas and 10,000+ detection rules now available for pilot. Two ...

Tenable Holdings, Inc. engages in the development of security software solutions. It offers Cyber Exposure which is a discipline for managing and measuring cybersecurity risk in the digital era. Its ...

Researchers have exposed OpenAI's covert Persona watchlist, active since 2023, screening users for government agencies via 53 ...