Aikido

A malicious npm package called codexui-android, disguised as a legitimate remote user interface for OpenAI Codex, exfiltrated developer authentication tokens by hiding malicious code in the published …

Independent security consultancy Doyensec found that Aikido's AI pentesting tool discovered 49 verified vulnerabilities versus XBOW's 31 in a head-to-head benchmark on two real applications, a 58% inc…

Critical evaluation framework for purchasing AI-powered penetration testing tools, warning that the market is fragmented and that vendors often use the same terms to describe different capabilities. I…