Belgian cybersecurity unicorn Aikido Security acquired Israeli startup Root for an estimated $70-100 million to integrate AI agents that patch open-source vulnerabilities without breaking applications…
Palo Alto Networks completed its acquisition of Koi in April 2026 for an estimated $400 million, folding the startup's supply chain security technology into Cortex XDR and Prisma AIRS. Teams evaluatin…
A developer spent a week testing an AI agent's ability to handle security workflows, finding that connecting the Aikido Security MCP via Vinkually enabled multi-step investigative queries that previou…
A new report from Aikido Security reveals that 76% of organizations have halted or rolled back AI-driven behavior due to security concerns, and 71% report that AI or automation has caused security iss…
Aikido Security launched Code Audit, a feature using multiple AI agents to perform pentest-grade vulnerability discovery on static source code without requiring a live environment. The tool aims to he…
Aikido Security launched Code Audit, a static code analysis product that uses agentic reasoning to detect complex vulnerabilities spanning multiple files, aiming to bridge the gap between SAST and hum…
Researchers at Aikido Security discovered 15 malicious plugins on the JetBrains Marketplace that stole AI API keys from approximately 70,000 developers. The plugins, posing as AI coding assistants and…
Aikido Security identified at least 15 malicious plugins on the JetBrains Marketplace that steal AI provider API keys from developers, with close to 70,000 total installs. The plugins, targeting DeepS…
A malicious npm package posing as a remote web UI tool for OpenAI Codex has been discovered in a supply-chain attack, exfiltrating authentication tokens from developers. The package, "codexui-android,…
A popular npm package for OpenAI Codex with 29,000 weekly downloads has been stealing developer authentication tokens for a month. The same credential-theft chain also ran through two Android apps wit…
A malicious npm package named codexui-android, which amassed roughly 27,000 weekly downloads, secretly exfiltrated OpenAI Codex authentication tokens by sending the contents of users' auth.json files …