FreeIPA and 389 Directory Server flaws let an anonymous client create an attacker-chosen Kerberos identity in the administrators group.

The most damaging LLM flaws rarely stop at an unsafe answer. They cross into retrieval systems, identity controls, tools, ...

At the cybersecurity conference Black Hat, researchers showed how an AI assistant at one of America’s largest retailers could be tricked into following hidden instructions and exposing sensitive ...

The attacks on CVE-2026-0768 are the latest threats against the low-code AI development platform, which adversaries are ...

Static application security testing, or SAST, is most useful when it is close to the way your team actually writes code. That is where Semgrep becomes valuable. It can scan source code quickly, fit ...

OpenAI EU AI Act incident report confirmed by European Commission after autonomous agents colonized a German wiki for six ...

OpenAI agents DseWiki breach: a second swarm of OpenAI AI agents secretly colonized a dormant German programming wiki for six ...

AI security protects the systems, data, models, prompts, APIs, identities, and infrastructure used to build and run AI ...

WKU Institute for Rural Health (IRH) gave a presentation to the Kentucky General Assembly’s Interim Joint Committee on Health Services about its work to improve healthcare access and outcomes in rural ...

Jolan Huijskes discussed a suite of Blender and Unreal Engine 5 tools he built to create a fully playable game environment, ...

CrowdStrike clocks 29-minute breakout times and an 89% surge in AI-augmented attacks. Here is the five-phase framework I use with CISOs to close that gap, with budget splits and a board script.

This update brings support for enterprise-managed sandbox policies, cross-file cursor jumps for next edit suggestions, global project context in chat, enterprise policy diagnostics, and a new ...