A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft ...

Today, we’re announcing the Aembit Claude Workload Identity Federation Credential Provider, the latest addition to Aembit’s growing Claude support. Aembit already covers a lot of ground with Claude: ...

Check Point researchers tried to break the frameworks enterprises use to build AI apps. Now they're telling Black Hat ...

Gemini CLI and Claude Code flaws let untrusted GitHub input reach CI workflows, including host command execution and API key ...

GitGuardian found 321 n8n instances accepting leaked GitHub tokens that could expose workflows, data, and downstream ...

Cloudflare announced today that it is giving AI agents something the agentic commerce stack has been missing since it began assembling in earnest: a structured, human-controlled budget. The company ...

Complete Security Scores averaged 86.80 percent, up 12.3 percentage points year over year, but API security trailed web ...

For the third year in a row, prompt injection tops the OWASP GenAI / LLM Top Ten list issued today as being the most ...

Your AI is only as secure as the APIs behind it. Lock those down first, or every other AI security investment is at risk.

Enterprise AI workspace security gets a new open-source option: Cloudflare OS is a free, self-hostable platform where AI ...

AI agent tool bypass vulnerability CoreBreak exposed production agent infrastructure at AWS, Google, and Vercel, where attackers could invoke tools without any model turn. AWS fixed its managed ...