We built a vulnerability vending machine: AI tokens in, zero-days out

Intruder built an AI-powered "vulnerability vending machine" that combines code slicing with LLMs to automatically discover ...
Tech Times

GitHub Copilot App Now Scans In-Flight Code for Vulnerabilities Before Commit

GitHub Copilot security review launched in the desktop app July 14, giving all subscribers — Free tier included — AI-driven ...

CISA urges immediate action on actively exploited Fortinet flaws

CISA on Thursday ordered government agencies to prioritize patching two actively exploited vulnerabilities in the Fortinet FortiSandbox threat detection platform.
SecurityWeek

Adobe Patches Critical ColdFusion Vulnerabilities

Adobe has released patches for 88 flaws in 12 products, including critical bugs in ColdFusion, Commerce, Experience Manager, and Illustrator.

Read this before you vibe-code another app

Your dream vibe-coded app might be a security nightmare.

7,000 Langflow servers are under attack. LangGraph and LangChain have the same holes

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your security tools look.

8 Best Agentic AI Security Companies for Prompt Injection & Secret Sprawl Defense

Chatbots now place orders, code assistants push updates, and autonomous agents comb production databases while you sleep.
The Next Web

‘GitLost’: researchers tricked GitHub’s AI agent into leaking private repos

Researchers tricked GitHub’s AI coding agent into leaking private repositories with nothing but a politely worded issue. The flaw, named GitLost, has no code fix, and GitHub has yet to even document ...

‘GitLost’ vulnerability let GitHub’s AI workflows leak private repositories

GitHub Inc.’s new Agentic Workflows feature that allowed an unauthenticated attacker to siphon data from private code ...