5+ day, 39+ min ago   (454+ words) The rapid integration of AI-assisted coding tools has become a primary target for threat actors, a new report from Google Threat Intelligence Group (GTIG) has warned. This shift in software development practices has contributed to several large-scale software supply chain…...

5+ day, 22+ hour ago   (416+ words) The UK's National Cyber Security Centre (NCSC) has warned that employees using unapproved AI tools can expose corporate data and create security risks that organizations may struggle to detect and manage. The NCSC blog post, published on September 7, said shadow…...

1+ week, 4+ day ago   (1553+ words) As frontier AI models supercharge vulnerability research, open-source security faces an existential challenge: an explosion of AI-generated vulnerability reports, flooding an already understaffed field. Industry leaders are responding with a new generation of security coalitions. AI-fatigue in the open-source community…...

1+ week, 4+ day ago   (411+ words) AI agents have acted outside their intended scope at 65% of surveyed enterprises, with 29% reporting measurable organizational impact. The finding comes from Agents Without Guardrails, a research report from Enterprise Management Associates (EMA) compiled for Cequence Security and based on responses…...

2+ week, 2+ day ago   (236+ words) More than 100 tech and cybersecurity companies, including OpenAI, Anthropic, Google and Microsoft, have warned there is a “narrowing window” to act before AI-enabled attacks escalate to a level that puts critical public services at severe risk. “In the coming months,…...

2+ week, 3+ day ago   (315+ words) Security researchers have warned that major gaps in IT oversight, surging numbers of published vulnerabilities, and MCP security risks are making the AI agent ecosystem increasingly risky. It found that 80% of AI tools operate with no oversight, while in SMBs,…...

2+ week, 4+ day ago   (465+ words) One major security challenge with generative AI, and particularly AI agents, is making these systems prove what they really did. The Linux Foundation aims to address this challenge through a new open standard for AI runtime evidence that helps make AI…...

2+ week, 5+ day ago   (698+ words) The US government has warned organizations of the unique cybersecurity and compliance challenges presented by multi-cloud environments. The National Institute of Standards and Technology (NIST) highlighted how using multiple cloud service providers (CSPs) makes it more difficult for organizations to…...

2+ week, 5+ day ago   (385+ words) A financially motivated threat actor has been observed abusing free Notion accounts, malicious PDFs and device code phishing to harvest authentication tokens from targeted organizations. Sublime's Threat Intelligence & Research team, which tracks the actor as Doubloon Dredger, identified the activity…...

2+ week, 6+ day ago   (296+ words) Security researchers have claimed that over 9300 leaked AWS keys which surfaced between August 2022 and August 2026 are still active, including hundreds with full admin rights. Truffle Security said its scanners found 64,024 unique AWS key pairs across 431,875 public findings: git history, Hugging…...