10 casos · pág. 1/1
TrustedSec's Justin Bollinger describes how a prek pre-push hook corrupted his git index on July 30. The resulting commit deleted 85,280 lines across about 165 files and staged gitignored, local-only paths (CLAUDE.md, .claude/, docs/plans/, docs/superpowers/). The commit reached the public trustedsec/hatecrack remote before it was force-p…
Microsoft announced new controls to monitor and restrict potentially rogue AI agents in enterprise environments, arguing that organizations should treat agents as insiders rather than trusted software. The capabilities extend Project Perception, the agentic security system launched in July, which was initially pitched as a defense against…
Microsoft published a blog post arguing that organizations should treat AI agents as a present insider threat rather than a future risk. Agents with access to critical systems can fail, be manipulated or be compromised, and their behavior can drift mid-run through prompt injection in external documents or untrusted data. Microsoft's answe…
Hacktron, a security software vendor, announced that it achieved SOC 2 Type 1 compliance against the Security trust services criteria. The audit was performed by Insight Assurance, with the Vanta platform supporting the compliance process. This is vendor business and compliance news and does not describe an incident, vulnerability or thre…
Hacktron has opened Hacktron Review for Open Source, giving qualifying open source projects its commercial pull-request security reviewer at no cost. The announcement argues that attackers use AI agents to hunt vulnerabilities at scale and to push malicious dependencies into open source. It cites CISA and VulnCheck data that median time-t…
Cloudflare announced a product update that integrates Cloudflare Workers with Cloudflare Gateway and DLP, making its secure web gateway programmable. A new Forward action (public beta) routes matched HTTP traffic to a Worker acting as inline middleware, while Custom Functions (expected before year-end) let Workers return typed values used…
This Aikido vendor blog argues that AI-assisted coding has outpaced the annual or biannual manual pentest cycle, and presents AI pentesting with fixed per-test pricing as the fix. Citing its 2026 State of AI in Pentesting report, it says 76% of organizations ship significant production changes weekly or faster, while only 21% validate sec…
Wiz published the first part of a blog series on operationalizing Application Security Posture Management (ASPM) with Wiz Code. It argues that AI models that find vulnerabilities and generate exploits, combined with AI-accelerated development, break manual AppSec triage workflows. The article uses React2Shell (CVE-2025-55182), a critical …
Aikido Security published a best-practices guide for defending against software supply chain attacks. It cites Aikido Intel data: about 7.5 million package versions analyzed in Q2 2026, with 19,500 malicious packages confirmed. The guide uses recent incidents to show which controls would have worked: the axios compromise, tj-actions/chang…
GBHackers published a research-based buyer's guide to 12 DevSecOps platforms for 2026. It is product comparison content, not a security incident, and reports no vulnerabilities, threat actors or attacks. The guide groups the market into code-platform natives, developer-security specialists, cloud-native stacks, delivery-pipeline governors…
