Recent posts tagged devsecops

Security dominated this week, but not in the usual way. Two active campaigns turned GitHub configuration files into attack surfaces. Researchers demonstrated that the built-in browsers inside AI coding tools can read your SSH keys. And at Oracle AI ...

Most security talk about AI coding agents focuses on the model. Will it run a bad command? Can a poisoned README trick it? New research from HiddenLayer looks somewhere else: the plumbing between the agent and the model. In a report released today, ...

A financial crime group active since 2012 just showed developers what their everyday agent stack looks like in the wrong hands. New research from Straiker shows how CyberCartel built a multi-agent attack system called CARLIY0S and aimed it at more ...

A week defined by two big ideas running in parallel: AI agents are breaking the infrastructure underneath them, and the security surface around developer workflows keeps growing. Both threads showed up in force. Here's what mattered. Anthropic hit ...

Ask an IT leader how many AI agents are running in their company and you'll usually get a pause. Ask which of those agents can delete data and the pause gets longer. That's not negligence. Agents don't arrive through one front door. A team turns on ...

A lighter week by volume — but the three security stories that did land are worth understanding carefully. Here's what mattered. A crafted package name was enough to reach an AI agent's AWS credentials BeyondTrust's Phantom Labs researcher Sergio ...

In 1996, a tiny piece of code nearly destroyed a rocket. Ariane 5 was being launched for the first time. About 37 seconds after launch, the rocket suddenly veered off course. The onboard computers detected something impossible. Both guidance comp...

A week where the same lesson kept showing up in different forms: the credentials your AI coding tools hold are the real attack surface, and most teams still can't answer the basic question of how many there are. Here's what mattered. Z.ai was packa...

Two critical patches with active exploitation, a database deleted in nine seconds, and Java finally getting ahead of a quantum threat most enterprises haven't started thinking about. Plus NVIDIA bringing Rust into the CUDA kernel — a genuinely signif...

Every AI security vendor ships a benchmark chart these days. Most of them don't survive a second phone call. On September 1, Cycode launched Agentic Code Scanning, a fourth layer that sits on top of its existing rule-based scanner and decides, code ...

A quieter week after the Black Hat stretch, but the five pieces that came out of it are worth your time. All five circle the same territory: what AI can and can't actually do in security, and who ends up owning the outcome when it falls short. Tria...

Here's a number worth sitting with: scanning a 2-million-line codebase with an AI-powered tool costs roughly $315 in tokens. Triaging what that scan finds costs $128,000. That 400x gap, buried in Contrast Security's new AppSec Overflow 2026 report, i...

Ask most AI SOC vendors what their agent does, and you'll hear some version of "faster investigations, fewer alerts." Ask Monzy Merza, and he'll walk you through a blast radius map instead — because for Crogl's customers, the real problem was never s...

Application security has operated on human timelines for as long as it's existed: a scanner flags something, a ticket gets filed, developers and security argue over priority, and a fix ships weeks or months later, if it ships at all. Rahul Sood, GM o...

Ask Rickard Carlsson, co-founder and CEO of Detectify, whether AI is handing attackers new capabilities, and he'll correct the premise. It's not new vulnerabilities. It's not new techniques. It's the same attacks, running on a clock that used to be m...

Github Source: https://github.com/ndouglas-edera/hostpid-risk/tree/main In a multi-tenant or shared Kubernetes node environment, containers are supposed to be isolated environments. However, this demo proves that if a malicious or compromised pod is...

Coming off Black Hat, the theme continues: the tools developers use every day are becoming part of the threat model. This week had two concrete examples of that — and a major shift in how one of the most widely used AI coding agents handles permissio...

Cursor's command-line coding agent has a workspace trust feature. It's supposed to stop the agent from acting on a project until you've told it you trust that project. Security researcher Francisco Rosales at Manifold Security found a way around it, ...