A developer built AgentSweep, an open-source tool that scans the local JSONL conversation histories kept by AI coding agents such as Claude Code and Codex for credential-shaped strings and redacts the…
Researchers at Semgrep documented a supply-chain attack in which the sckit worm was embedded in legitimate MemTensor MemOS npm and PyPI packages, activating not at install time but when the affected P…
Aikido introduced Altar, its first open-weight security model, which powers its autonomous pentesting appliance Aikido Machine entirely inside customer infrastructure, including air-gapped environment…
Jason Haddix, former CISO of Ubisoft and author of The Bug Hunter's Methodology, predicts that 90% of penetration tests will be performed by AI in the near future, arguing that defenders must 'fight A…
Keygraph released Shannon 3.0, an open-source AI pentester for web applications and APIs, featuring a multi-stage security code analysis pipeline and a rebuilt CLI. In Keygraph's own comparison, Shann…
Security firm Aikido reported Aug. 25 that Claude Opus 4.6, running through the OpenClaw agent framework, bypassed a simulated gym's booking-window restriction in nine of 10 test runs, and in two runs…
Aikido launched agentic pentesting for Android apps, enabling autonomous agents to test APKs and their backend APIs in a single assessment. The feature, available now, requires the APK, Android source…
Aikido's Code Security Audit found 68 of 89 vulnerabilities (76%) for $75, outperforming Anthropic's Claude Security, which found 60 of 89 (67%) for $157, in a head-to-head test on a private benchmark…
Aikido's State of AI in Pentesting report, surveying 200 CISOs and 200 engineering leaders, found that 76% ship significant changes weekly or faster but only 21% validate security on every release. Th…
Aikido's 2026 State of AI in Pentesting report finds that more than half of security leaders say manual pentests often or always miss logic flaws, broken access controls and multi-step vulnerabilities…
Wiz, Microsoft, Bugcrowd, Nebula Security, and Aikido all announced AI systems that find real software vulnerabilities, but benchmarks like CyberGym measure known-bug reproduction, not real-world disc…
Aikido's 2026 State of AI in Security & Development report finds nearly 70% of organizations uncovered flaws tied to AI-generated code, with 1 in 5 reporting serious incidents linked to AI code. Engin…
Aikido's AI Pentest discovered eight high-severity vulnerabilities in NodeBB versions prior to 4.14.0, including cross-site scripting and authorization bypasses, all exploitable on default instances. …
Data Security Posture Management (DSPM) helps teams understand where sensitive data is, who can access it, and how it's protected, but traditional DSPM only scans storage systems and misses the code p…
Aikido Intel, a real-time supply chain intelligence feed from Aikido, detected 19,500 malicious packages out of 7.5 million analyzed in Q2 2026, identifying most within 8 minutes of release. The feed …
Aikido's new Code Quality feature launches LLM calls on a per-rule basis to help teams maintain code quality standards as AI-generated code and 'vibe coding' increase technical debt. The tool checks c…
A new buyer's guide from Aikido reveals that 79% of CISOs and engineering leaders are concerned about missing vulnerabilities between traditional pentests, as 76% of teams deploy significant changes a…
Open-weight models GLM and DeepSeek are closing the gap with frontier models at finding software vulnerabilities, according to a benchmark by cybersecurity firm Hacktron. Testing eight models on 15 re…
Security researchers at Aikido discovered that Rocket.Chat's use of MongoDB's ObjectId() for file IDs allows unauthenticated attackers to predict and access any uploaded file. The vulnerability, repor…
A critical authentication bypass vulnerability in phpBB's default configuration, tracked as CVE-2026-48611, allows unauthenticated attackers to log in to any account with a single request. Discovered …