AI & software security
-
BioShocking exposes AI browser identity risk
LayerX research shows how AI browsers can be manipulated into exposing credentials, code, and signed-in account data.
-
Intruder opens exposure management free tier
Intruder’s permanent free plan gives smaller organisations access to vulnerability scans, cloud checks, attack surface monitoring, and limited AI pentesting.
-
GitHub advisory surge strains vulnerability pipeline
GitHub says its Advisory Database is processing record vulnerability volume, exposing pressure on the systems behind dependency alerts and open source risk.
-
GuardFall exposes coding-agent command risk
GuardFall research shows how AI coding agents can be pushed past command safeguards, exposing developer machines, secrets, repositories, and build environments.
-
Aikido buys Root for open source patching
Belgian security company Aikido has acquired Root, adding technology for backported open source fixes as dependency risk moves deeper into developer workflows.
-
ENISA finds SME readiness gap on CRA
ENISA’s SME survey shows that Europe’s Cyber Resilience Act will depend on practical support for smaller suppliers as much as formal legal duties.
-
Cequence puts agents inside API security
Cequence Platform 9.0 adds an AI assistant and MCP server, bringing agent-operated workflows into API security, compliance evidence, and control changes.
-
Google maps pro-Russia influence machinery
Google says Russia’s influence ecosystem is moving beyond Ukraine-specific wartime narratives towards wider strategic targets, with Europe, NATO, cyber leaks, and AI in focus.
-
Langflow attacks expose AI workflow risk
Observed exploitation of Langflow vulnerabilities shows how self-hosted AI workflow tools can expose API keys, cloud secrets, and agent infrastructure before governance catches up.
-
NCSC warns AI is compressing cyber risk
The NCSC and Five Eyes partners have warned that AI is changing cyber risk on a timeline of months, increasing pressure on organisations to test control performance.