Aikido's State of AI in Pentesting report, surveying 200 CISOs and 200 engineering leaders, found that 76% ship significant changes weekly or faster but only 21% validate security on every release. Th…
Aikido's 2026 State of AI in Pentesting report finds that more than half of security leaders say manual pentests often or always miss logic flaws, broken access controls and multi-step vulnerabilities…
Wiz, Microsoft, Bugcrowd, Nebula Security, and Aikido all announced AI systems that find real software vulnerabilities, but benchmarks like CyberGym measure known-bug reproduction, not real-world disc…
Aikido's 2026 State of AI in Security & Development report finds nearly 70% of organizations uncovered flaws tied to AI-generated code, with 1 in 5 reporting serious incidents linked to AI code. Engin…
Aikido's AI Pentest discovered eight high-severity vulnerabilities in NodeBB versions prior to 4.14.0, including cross-site scripting and authorization bypasses, all exploitable on default instances. …
Data Security Posture Management (DSPM) helps teams understand where sensitive data is, who can access it, and how it's protected, but traditional DSPM only scans storage systems and misses the code p…
Aikido Intel, a real-time supply chain intelligence feed from Aikido, detected 19,500 malicious packages out of 7.5 million analyzed in Q2 2026, identifying most within 8 minutes of release. The feed …
Aikido's new Code Quality feature launches LLM calls on a per-rule basis to help teams maintain code quality standards as AI-generated code and 'vibe coding' increase technical debt. The tool checks c…
A new buyer's guide from Aikido reveals that 79% of CISOs and engineering leaders are concerned about missing vulnerabilities between traditional pentests, as 76% of teams deploy significant changes a…
Open-weight models GLM and DeepSeek are closing the gap with frontier models at finding software vulnerabilities, according to a benchmark by cybersecurity firm Hacktron. Testing eight models on 15 re…
Security researchers at Aikido discovered that Rocket.Chat's use of MongoDB's ObjectId() for file IDs allows unauthenticated attackers to predict and access any uploaded file. The vulnerability, repor…
A critical authentication bypass vulnerability in phpBB's default configuration, tracked as CVE-2026-48611, allows unauthenticated attackers to log in to any account with a single request. Discovered …
Aikido's AI penetration testing platform offers continuous, autonomous security assessments that produce compliance-ready reports for most frameworks, though some requiring accredited human testers st…
Aikido acquires Root to secure the software supply chain by using AI-generated patches for open-source vulnerabilities. Root's agent-native system produces hundreds of verified CVE patches daily witho…
A supply-chain attack on the @mastra AI-agent ecosystem saw an attacker republish 141 packages with a malicious dependency that targeted crypto wallets. The incident highlights how AI coding tools lik…
A supply chain attack compromised over 140 npm packages in the @mastra scope, including @mastra/core with 918K weekly downloads, by injecting a malicious dependency that executes a postinstall script …
Aikido launched Code Audit, a tool that uses agentic AI to find multi-step, logic-based vulnerabilities in source code, filling the gap between SAST and pentesting. The release follows Anthropic's wit…
Anthropic released Claude Fable 5, a public version of its Mythos Preview model, routing cybersecurity prompts to a less capable Opus 4.8 model for safety. The release follows Mythos Preview's debut a…
Aikido's AI pentesting tool discovered a critical authentication bypass vulnerability in phpBB, affecting tens of millions of users across thousands of forums. The flaw, present in versions up to 3.3.…
AI SAST is a new category of static application security testing where an AI reasons about code to find vulnerabilities like IDORs and business logic flaws that traditional rules-based SAST misses. It…