We built a vulnerability vending machine: AI tokens in, zero-days out

Intruder built an AI-powered "vulnerability vending machine" that combines code slicing with LLMs to automatically discover ...
Tech Times

Enterprise Java Embraces Spring AI and MCP as Agent Security Becomes Its Next Crisis

Spring AI enterprise Java is now in production, but agent security is the next crisis: UberConf 2026 opens today in Denver ...

'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit, ...
techtimes

North Korea macOS Malware Gaslight Manipulates AI Triage Tools, Not the Sandbox

An IT specialist in cyber security looks at a morphological analysis of a software containing a malware at the Loria (Lorraine Laboratory for Research in Computer Science and Applications) ...
The Verge

Read this before you vibe-code another app

Bob Starr was delighted with his vibe-coded website. “Boomberg” showed how much US tax money is going to tech companies, and Starr launched it online immediately after making it. It wasn’t until ...

7,000 Langflow servers are under attack. LangGraph and LangChain have the same holes

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your security tools look.
GitHub

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws.

Follow this installation guideline if facing an installation issue. Note: ghauri has to be cloned/installed from github for this switch to work for futures updates, for older version users they have ...