A new open-source tool called Betterleaks can scan directories, files, and git repositories and identify valid secrets using default or customized rules.

CNCERT warns OpenClaw AI agent has weak defaults enabling prompt injection and data leaks, prompting China to restrict use on government systems.

OpenDataLoader PDF PDF v2.0 is available now. Source code, benchmark datasets, and documentation are published at the OpenDataLoader PDF official GitHub repository. Photo - ...

Infosecurity spoke to several experts to explore what CISOs should do to contain the viral AI agent tool’s security vulnerabilities ...

OX Security today announced OX Agentic Pentester, a continuous penetration testing capability powered by agentic AI that validates real-world exploitability and connects each verified exposure ...

VS Code 1.111 Autopilot is not just a no-prompts mode. In testing, it handled a blocking question that still stopped Bypass.

The Contagious Interview campaign weaponizes job recruitment to target developers. Threat actors pose as recruiters from crypto and AI companies and deliver backdoors such as OtterCookie and ...

Anthropic, a smaller rival started by OpenAI defectors, has found runaway success with its programming agent, Claude Code.

Five malicious Rust crates and an AI bot exploited CI/CD pipelines and GitHub Actions in Feb 2026, stealing developer secrets ...

Open source collective reinvents web video players, with minimal adaptive bitrate player now 38kB gzipped vs. typical ...

Attackers operated an active C2 implant for up to a week and compromised AppSec vendor Xygeni's xygeni/xygeni-action in that time.

Can free AI scanners replace enterprise SAST? Anthropic and OpenAI found 500-plus zero-days pattern-matching tools missed — and both scanners are free.