BSides Las Vegas

GitHub has revoked npm granular access tokens' ability to bypass two-factor authentication for sensitive account, organization, and package management actions, closing a security gap. The announcement…

ProjectDiscovery researcher Tarun Koyalwar's audit of offensive-security AI agents on 54 usable black-box web targets found that most failed runs had already identified the correct vulnerability but c…