Millions of AI agents imperiled by critical vulnerability in open source package

Millions of AI agents and tools around the world have been imperiled by a critical vulnerability that can allow hackers to breach the servers running them and make off with sensitive data and ...
CSOonline

Trivy vulnerability scanner backdoored with credential stealer in supply chain attack

‘If you suspect you were running a compromised version, treat all pipeline secrets as compromised and rotate immediately,’ Trivy maintainer says. Attackers have compromised the widely used open-source ...
InfoQ

Cloudflare Adds Active API Vulnerability Scanning to Its Edge

Cloudflare has announced the open beta of its Web and API Vulnerability Scanner. This Dynamic Application Security Testing (DAST) tool is part of the API Shield platform. The first release focuses ...
Nature

Web Application Vulnerability Detection and Mitigation

Web applications underpin a vast array of services—from banking and e-commerce to social media—and their increasing complexity has amplified exposure to cyber threats. Vulnerability detection ...
Android

OpenAI’s Codex Security: An AI Agent That Hunts Down Vulnerabilities

OpenAI has launched Codex Security, an AI-powered vulnerability scanner, in research preview for ChatGPT Pro, Enterprise, and Edu users. Formerly known as Aardvark, the tool aims to reduce false ...