Tech Times

Enterprise Java Embraces Spring AI and MCP as Agent Security Becomes Its Next Crisis

Spring AI enterprise Java is now in production, but agent security is the next crisis: UberConf 2026 opens today in Denver ...
Microsoft

Defending SaaS-based applications against ShinyHunters OAuth abuse

Microsoft Threat Intelligence identified threat actor activity with overlapping tradecraft commonly associated with ...

New phishing kits target Microsoft 365 accounts, evade MFA

Two new phishing kits, Jalisco and OmegaLord, have been discovered in attacks targeting Microsoft 365 accounts, using ...

Why Authentication Is Not Enough For Agents

Logging can tell you something happened. But none of that alone determines whether the action should be allowed, given the ...
SecurityWeek

Ghost Accounts Abuse GitHub API in Mass Recon Campaign

Multiple threat actors are abusing the GitHub API to discover organizations’ repositories and members via ghost accounts.
InfoQ

Google and Industry Partners Announce Agentic Resource Discovery Specification for AI Agents

Google and industry partners announced Agentic Resource Discovery (ARD) Specification, an open standard for publishing, ...
InfoQ

Google's Genkit Ships Agents API with Detached Turns and Human-in-the-Loop for TypeScript and Go

Google released the Genkit Agents API in preview for TypeScript and Go. The open-source framework packages message history, ...
ADTmag

Java Ecosystem Advances with Strict Field Initialization JEP Amid Cross-Platform Malware Threats

The global Java development ecosystem experienced significant structural changes this week following the introduction of a new OpenJDK enhancement draft alongside warnings from cybersecurity ...

AsyncAPI npm packages infected with credential-stealing malware

Five malicious versions of AsyncAPI packages were published to the Node Package Manager (npm) in a supply-chain attack that ...