Sonatype's Open Source Malware Index counted 3,286 potentially unwanted applications, 2,155 secrets-exfiltration cases, and 1,326 droppers on PyPI in Q2 2026, totaling nearly 6,800 malicious Python pa…
OpenAI and Anthropic joined 117 organizations in an open letter published August 27, 2026, urging a coordinated global push to strengthen AI-enabled cyber defenses, with signatories including AWS, Ora…
Broadcom released security updates to VMware vDefend and VMware Avi Load Balancer, adding accelerated threat prevention and native API protection to counter AI-driven threats. The vDefend platform now…
Straiker, a Mountain View-based security startup founded by Ankur Shah, launched the Agentic Kill Switch on Aug. 4, a control that can take compromised or misbehaving AI agents offline in seconds, fol…
Gartner forecasts worldwide AI spending will reach $2.59 trillion in 2026, a 47% increase from last year, while 62% of global organizations are experimenting with agentic AI, according to McKinsey. Th…
A developer's analysis of AI crawler verification methods reveals that user-agent headers are unverified claims and cannot be trusted. The most widely supported method is IP-range verification, used b…
Akamai CEO Tom Leighton argues that the industry's focus on building massive, centralized data centers for AI is misguided, especially for AI inference and agentic AI, which require low latency and di…
Over 83% of internet traffic is now API-based (Akamai, 2025), yet many engineering teams still rely on partial manual validation, slowing releases and increasing regression risk. API automation testin…
Apple has accused OpenAI of trade secret theft, alleging that the AI company used distillation techniques to train its models on Apple's proprietary data without authorization. The accusation, reporte…
Cloudflare will block AI crawlers by default on ad-supported pages starting September 15, replacing its Pay Per Crawl model with a Pay Per Use system that charges AI companies only when their content …
Cloudflare is rolling out new rules for 'mixed crawlers' that can be used for both search and AI training, setting a Sept. 15 deadline to block training and agent use by default on ad-supported pages.…
A critical use-after-free vulnerability in OpenBSD allows local privilege escalation to root. Researchers demonstrated a prompt injection attack on GitHub's AI agent that leaked private repository dat…
Akamai's blog post on the new MCP specification is inaccessible due to a permission error, leaving security teams without the intended guidance. The access denial suggests potential server misconfigur…
A developer built browser-search, a set of three open-source tools that enable AI agents to search and browse the web without API keys or subscriptions. The tools—SearXNG, Camofox, and CloakBrowser—wo…
A small company, 2Brains Inc., claims to have solved AI hallucinations architecturally, challenging the prevailing industry belief that scaling compute will fix the problem. The company's approach, wh…
Stack Overflow and Cloudflare launched pay-per-crawl on February 19, 2026, requiring AI crawlers to pay publishers per request via HTTP 402 status codes. The system, verified at Cloudflare's edge, shi…
Microsoft Clarity now flags bot requests that violate a website's robots.txt rules, displaying them as a percentage of total bot activity in its Bot Analytics dashboard. The feature, which must be ena…
Cato Networks joined OpenAI's Daybreak Cyber Partner Program on June 22, 2026, integrating GPT-5.5 and Codex security tools into its SASE platform to reduce vulnerability response times. The partnersh…
A developer created chrome-mcp, a dedicated Chrome launcher for the chrome-devtools MCP server that isolates automation profiles from daily browsing. The tool prevents reCAPTCHA triggers and security …
A controlled experiment sent 1,000 fake visitors to a site running Google Analytics 4 and Clickport. GA4 flagged none of the bot sessions, while Clickport blocked 80% across five scenarios. The test h…