The First Question Security Teams Should Ask on AI Projects
Cloud Security Alliance identifies the critical first question for AI project security: mapping data access and action capabilities before deployment.
Read more →Security News
Latest cybersecurity news, vulnerabilities, and threat intelligence
BodySnatcher: Critical ServiceNow AI Vulnerability Enables Platform Takeover
Critical BodySnatcher vulnerability CVE-2025-12420 in ServiceNow AI enables unauthenticated platform takeover through hardcoded credentials and broken authentication.
Read more →
Bad Vibes: Security Flaws Plague Popular AI Coding Agents
Tenzai study finds 72 vulnerabilities in code from AI agents including Cursor, Claude Code, and Codex. Business logic flaws dominate despite SQL/XSS prevention.
Read more →
AI Tool Poisoning: Hidden Instructions Threaten Autonomous Agents
CrowdStrike reveals AI Tool Poisoning attacks that inject hidden instructions into data sources, manipulating autonomous AI agent behavior.
Read more →
AI Adoption Bottleneck: Security Concerns Outpace Model Capabilities
Zack Korman argues AI adoption bottleneck is security, not models or tools. Enterprise security concerns outpace available mitigation strategies.
Read more →
What AI Agents Can Teach Us About Non-Human Identity Governance
GitGuardian research shows AI agents expose fundamental non-human identity governance weaknesses in credential management and access control.
Read more →
Agentic Browsers Lack Isolation, Resurface Decades-Old Web Vulnerabilities
Trail of Bits research shows agentic browsers resurrect XSS and CSRF vulnerabilities through inadequate trust zone isolation between AI agents and web content.
Read more →
The Agent Security Paradox: Trusted Commands in Cursor Become Attack Vectors
Pillar Security reveals Agent Security Paradox where trusted Cursor commands become attack vectors through malicious repository content exploitation.
Read more →
Threat Actors Exploit Google Cloud Infrastructure to Bypass Security Controls
Threat actors increasingly abuse Google Cloud infrastructure to bypass security controls, exploiting the reputation of major providers to evade detection.
Read more →
Zero-Day Vulnerabilities Explained: Detection and Defense
Learn what zero-day vulnerabilities are, how attackers exploit them, and effective detection and defense strategies for your organization.
Read more →