A planted AGENTS.md file tricked OpenAI’s Codex into installing malware, exposing a risk for AI coding agents that act on ...

TransUnion explores synthetic identity fraud risks, AI-driven scams and account takeovers that threaten customer trust and ...

AI ban: the moderators bar AI projects and add rules that shut out solo maintainers and non-English speakers from sharing ...

Dormant AI agents retain credentials and system access, exposing companies to unsecured triggers and sensitive data security ...

Witness, an open source software supply chain tool, signs each build step and fails artifacts that break a signed policy.

GitGuardian’s State of Secrets Sprawl 2025 report shows no progress in combating secrets sprawl, with 23.8 million secrets leaked on public GitHub repositories in 2024—a 25% year-over-year increase.

Kali Linux 2026.3 refreshes its build scripts, adds Docker and Podman builds and kernel 7.1.5. Using the scripts in CI? Check ...

Fortinet released updates for FortiOS, FortiManager, FortiAnalyzer, FortiMail, FortiAuthenticator, without disclosing ...

Employees leaking data through AI tools worry security teams more than AI phishing and other attacks, according to an ...

Google open-sourced the Elephant-Goldfish Model plugin, which makes stateless AI sessions attack a design doc before any code ...

Anthropic details Claude Duet security safeguards, covering user approvals, sensitive data checks, passwords and browser isolation.

Open source AI slop hits large projects hardest, a Linux Foundation survey finds, and their maintainers now rank burnout as the top concern.