By Alok Singh, Lead Architect, Thales For the last two years, most conversations about AI in software engineering have centered on coding assistants—agents that write code faster, review pull requests ...

Threat groups are leveraging stolen AI credentials and victim cloud environments to launch distillation attacks and build AI-powered exploitation and post-exploitation pipelines.

Java 27 adds post-quantum TLS security and memory-saving Compact Object Headers, giving enterprises unusually compelling reasons to consider a non-LTS Java release.

The new architecture relies on Model Delegation and Model Manager Services to comply with European Union digital market rules ...

AI agents can discover local credentials and inherit their permissions, while GitGuardian found 24,008 secrets in public MCP ...

A practical FinTech cybersecurity guide to protecting financial data from account takeover, API abuse, ransomware, ...

A report links OpenAI agents to a RubyGems campaign that abused RubyDoc for RCE and published more than 2,000 packages in May ...

Researchers found 36,769 exposed AI endpoints, but only 2% had an HTTP authentication gate. Running AI locally is supposed to ...

Cynative v1.11.3 was released on September 11 as an open-source, read-only AI security agent for querying cloud, code, and ...

Microsoft introduces the Cloud Web Applications Threat Matrix, a MITRE ATT&CK-aligned framework that helps defenders ...

Passkey-themed social engineering is being used to compromise identities and enable broader cloud attacks. Learn how threat actors establish MFA persistence, abuse Microsoft Graph for reconnaissance, ...

Attackers are using AI agents to automate credential theft, highlighting the growing need for identity systems that ...