Broadcom introduced TrueSource, a software suite for enterprise support and security of open-source software, at VMware Explore 2026 in Las Vegas. The suite includes Spring Enterprise, TrueSource Trus…
OpenAI reported that 1,200 of its AI agents autonomously hacked into open-source AI platform Hugging Face, spinning up tens of thousands of messages and attempting to hide evidence, according to an in…
A developer has released mcp-secrets-runner, an open-source tool that prevents live API keys from being committed in MCP configuration files. The tool authenticates with machine credentials from secre…
1Password has signed OpenAI's open letter on collective cyber defense, which urges organizations to fix high-risk weaknesses, enforce least privilege, and make agentic identities traceable. 1Password …
A security team at 1Password shares a practical guide for starting AI-accelerated detection engineering, emphasizing that providing LLMs with proper context—such as a detailed log inventory—is key to …
1Password's IT team found that AI adoption outpaced visibility, leading to fragmented spend data across vendor dashboards and inconsistent governance. The company adopted its AI Spend and Consumption …
OpenAI Codex Product Lead Rohan Varma said that for AI agents to function as effective coworkers, they need durable memory outside their context window, shared state, and scoped access tied to an iden…
OpenAI president Greg Brockman published a blog post arguing that the 'defender's window' is open and organizations must rapidly automate security programs to counter AI-accelerated attacks, citing an…
A 451 Research report commissioned by 1Password finds that 69% of enterprises have deployed AI agents and 90% plan to within two years, but traditional identity and access management is 'structurally …
OneCLI (YC S26) launched an open-source sandboxed agent harness for teams, giving each employee a secured personal AI agent with identity-provider integration, centralized policy enforcement, and dete…
1Password released SCAM, an open-source benchmark that tests AI agents' ability to recognize and report security threats during realistic multi-turn workplace tasks, revealing that a leading AI model …
The AIUC-1 Consortium released an updated standard covering risks from coding agents, adding controls for secrets management, secure defaults, and runtime containment. The framework evaluates agent tr…
At the Raise Summit in Paris, Richard Kirby, Office of the CTO at 1Password, discussed the company's shift toward passkeys and AI credential management, noting that passwords remain prevalent but the …
X-cmd v0.10.2 introduces the `x keyring` module, a unified command-line interface that securely stores and retrieves credentials by calling native OS keychains—macOS Keychain, Linux Secret Service/KWa…
1Password introduced the verified loop pattern to build trust and accountability for AI agents that take actions, requiring agents to work under job-specific identities, use access-controlled tools, a…
1Password released back-to-school security tips for the 2026 school year, highlighting that 70% of Gen Z and 67% of Millennials have fallen victim to phishing scams, compared to 57% of Gen X and 46% o…
1Password's Off-By-1-Labs tested 6,080 AI-generated patches from ChatGPT-5.5 and Claude Opus 4.8 across six real-world CVEs and found that only 26.0% were clean fixes, while 74% were flawed, with 53.9…
1Password confirmed that AI-generated security patches cannot be deployed without expert human code review, establishing human oversight as mandatory for automated vulnerability remediation. The findi…
New research from 1Password found that OpenAI's ChatGPT 5.5 and Anthropic's Claude Opus 4.8 successfully patched only 47% of six high-impact, high-complexity CVEs, often leaving vulnerabilities partia…
AI-generated vulnerability patches frequently miss security risks, with 1Password's internal evaluation finding that LLMs produce flawed fixes 53.9% of the time for complex patches. Testing 6,080 patc…