A developer's laptop accumulates dozens of long-lived credentials across shell history, environment files, and cloud CLI configs, making it a prime target for infostealer malware. Traditional Git-base…
GitGuardian highlights that agentic AI systems are widening the gap in non-human identity (NHI) security and governance, as organizations prioritize capability over least privilege. The company argues…
A developer's verification arc found that AI agents can leak credentials under neutral task conditions, where leaking actively works against task success, and that a custom detector caught all such le…
Black Hat USA 2026 continued with a second photo gallery from Help Net Security, featuring vendors BlackCloak, Teleport, GitGuardian, Oak, Hexnode, and Picus Security, and a talk by Kate Silverstein o…
AI-assisted pull requests contain 1.7 times more issues than purely human-written code, according to CodeRabbit's State of AI vs Human Code Generation report analyzing 470 real-world GitHub pull reque…
Data security company Cyera agreed to acquire non-human identity startup Oasis Security for approximately $1 billion, a deal that underscores the industry's recognition that AI agents are running in p…
C1 launched Agentic Vault, a secrets vault built into identity governance that secures exposed credentials found by shadow AI discovery and governs every secret through the same request, approval, and…
1Password launched 1Password Environments and Developer Watchtower to help teams find and secure improperly stored developer credentials, addressing a 34% year-over-year increase in leaked secrets on …
Georgia Tech's Systems Software and Security Lab has confirmed 74 CVEs directly attributed to AI-generated code in 2026, with the actual number estimated at 400 to 700 cases in the open-source ecosyst…
Orca Security's 2026 State of AI Security Report found that 99.9% of fixable AI vulnerabilities remain unpatched across 1,200+ production cloud environments, with 50% of AI package vulnerabilities now…
AI-assisted 'vibe coding' is causing a surge in security vulnerabilities and leaked secrets, with developers producing code at three to four times the rate but introducing security flaws at ten times …
GitGuardian found 28.6 million secrets exposed in public GitHub commits in 2025, a 34% jump year over year, with over 1.2 million AI-service credentials alone up 81%. To generate a secure API key, use…
Amazon Q Developer's VS Code extension automatically executed MCP server configurations from workspace files without user consent, exposing AWS credentials. Wiz Research disclosed CVE-2026-12957 (CVSS…
AI coding assistants are increasingly exposing credentials in git history, leading to automated credential harvesting and financial losses. A developer lost $12,000 after an AI agent hardcoded an API …
GitGuardian has introduced an MCP server that integrates directly into AI coding agents like GitHub Copilot to enforce real-time security checks on generated code. The tool addresses the challenge of …
Identiverse 2026 in Las Vegas focused on identity security for AI agents, with over 3,800 attendees and 250 speakers. Ping Identity CEO Andre Durand highlighted a shift toward 'actions, not access,' w…
A developer created leak_probe.py, an 80-line Python tool that checks which secrets actually ship in an npm package versus those found in the git repository. Testing showed 6 secret hits in the repo b…
Postman launched Passport, a secure API access system that replaces real API keys with cryptographic credential references bound to the holder, to prevent secret sprawl and leakage in the age of AI ag…
Anthropic made Workload Identity Federation (WIF) generally available on the Claude Platform as of June 17, allowing workloads to authenticate with short-lived OIDC tokens instead of static API keys. …
A developer who has run both approaches in production environments from a 5-person startup to a 200-developer platform org compares AI-based secret scanning with traditional regex-based tools in CI pi…