Securing AI-Speed Development: Webinar Explores New Operating Model for Security Teams
AI is enabling development teams to ship 10 to 50 times more code, but security teams still operate at human speed, creating…
Tag: DevSecOps
Webinar: The True Cost of Building at Machine Speed
This webinar by Chainguard explores how security teams can keep up with AI-driven development, addressing the challenges of vulnerability management at scale,…
AWS, Google, and Vercel Patch Agent Flaws Allowing Tool Execution Without Model Authorization
Security researchers have uncovered a class of vulnerabilities in agent infrastructure from Amazon Web Services (AWS), Google, and Vercel that allow attackers…
Leaked n8n API Tokens Expose 321 Live Instances to Credential Theft
GitGuardian researchers have uncovered a significant security risk affecting n8n, a popular open-source workflow automation platform. By scanning public GitHub commits, they…
Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent
Google has removed three AI agent workflows from its Agent Development Kit (ADK) Python repository after researchers at Pillar Security demonstrated that…
GitHub Introduces 3-Day Dependabot Cooldown to Mitigate Poisoned Package Attacks
GitHub has announced a new cooldown mechanism for Dependabot that introduces a mandatory three-day waiting period before opening pull requests for version…
GitLab RCE PoC Exploit Allows Authenticated Users to Execute Commands as Git
Security researcher Yuhang Wu at depthfirst has published a working proof-of-concept (PoC) exploit for a remote code execution (RCE) vulnerability in self-managed…
AI Agent Security: Why Visibility Alone Fails and Enforcement Must Follow
AI agent security is evolving from visibility to enforcement, but many organizations remain stuck in the discovery phase. According to a new…
GitHub Slashes Public Bug Bounty Payouts by Half, Launches VIP Tier for Top Researchers
Beginning July 27, 2026, GitHub will reduce public bug bounty payouts by at least 50% across all severity levels, moving top rewards…
Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents
A critical vulnerability in Microsoft's official Azure DevOps MCP server allows attackers to inject hidden HTML comments into pull request descriptions, which…