#the


The EOL Blind Spot in Your CVE Feed: What SCA Tools Miss

May 6, 2026 // 00:58

Written by Isaac Wuest, Principal Product Manager at HeroDevs. When security teams think about end-of-life (EOL) open source software, the conversation usually starts and ends […]

The Back Door Attackers Know About — and Most Security Teams Still Haven’t Closed

May 6, 2026 // 00:48

Every AI tool, workflow automation, and productivity app your employees connected to Google or Microsoft this year left something behind: a persistent OAuth token with […]

We Scanned 1 Million Exposed AI Services. Here’s How Bad the Security Actually Is

May 5, 2026 // 13:34

While the software industry has made genuine strides over the past few decades to deliver products securely, the furious pace of AI adoption is putting […]

2026: The Year of AI-Assisted Attacks

May 4, 2026 // 15:04

On December 4, 2025, a 17-year-old was arrested in Osaka under Japan’s Unauthorized Access Prohibition Act. The young man had run malicious code to extract […]

What Happens in the First 24 Hours After a New Asset Goes Live

May 1, 2026 // 00:17

A technical look at the first 24 hours: how quickly attackers enumerate and target newly exposed assets Written by Topher Lyons – Sprocket Security The […]

Learning from the Vercel breach: Shadow AI & OAuth sprawl

Apr 29, 2026 // 16:16

Most organizations are rightly nervous about employees adopting unapproved AI tools. Shadow AI use in the form of LLMs, where users upload sensitive data to […]

Webinar: How to Automate Exposure Validation to Match the Speed of AI Attacks

Apr 29, 2026 // 15:22

In February 2026, researchers uncovered a shift that completely changed the game: threat actors are now using custom AI setups to automate attacks directly into […]

Why Secure Data Movement Is the Zero Trust Bottleneck Nobody Talks About

Apr 28, 2026 // 14:59

Every security program is betting on the same assumption: once a system is connected, the problem is solved. Open a ticket, stand up a gateway, […]

Mythos Changed the Math on Vulnerability Discovery. Most Teams Aren’t Ready for the Remediation Side

Apr 27, 2026 // 14:59

Anthropic’s Claude Mythos Preview has dominated security discussions since its April 7 announcement. Early reporting describes a powerful cybersecurity-focused AI system capable of identifying vulnerabilities […]

Project Glasswing Proved AI Can Find the Bugs. Who’s Going to Fix Them?

Apr 23, 2026 // 14:39

Last week, Anthropic announced Project Glasswing, an AI model so effective at discovering software vulnerabilities that they took the extraordinary step of postponing its public […]

Previous 1 … 22 23 24 25 26 … 28 Next