Four major AI coding agents, Claude Code, Codex, Copilot and Gemini CLI, all share the same zero-click remote code execution ...

Google's AndroidX Security State libraries help apps check installed patches, available updates, and fixes for specific flaws ...

A study of 61,500 abandoned IoT apps found broken data flows, dead domains, and outdated libraries still exposing user data ...

HYPR research shows how gaps in hiring and identity checks weaken fraud detection before new employees gain access to corporate systems.

Melapress's WordPress security survey of 319 pros finds 67.7% have had an incident, yet fewer than three in ten have a breach recovery plan.

MCP credential exposure puts API keys and access tokens at risk as hardcoded secrets remain in public GitHub configuration files.

Here’s a look at the most interesting products from the past week, featuring releases from Akuity, Bitsight, Cohesity, Dataminr, and more.

Vigolium, an open-source vulnerability scanner that combines deterministic scanning with AI-driven auditing, launched its initial open-source release this month. The project ships 235+ scanner modules ...

Cisco confirmed attackers are hitting CVE-2026-76460, an authentication bypass bug in an API of Cisco Identity Services ...

On AI and open source, ACM authors warn coding tools add review work for maintainers while many projects lack reliable ...

Google’s Agent Anomaly Detection monitors AI agents for suspicious behavior, policy violations, tool misuse, and operational ...

A Linux privilege escalation vulnerability (CVE-2026-87886) in Acronis' backup extensions for cPanel & WHM is being exploited ...