AI-assisted pull requests contain 1.7 times more issues than purely human-written code, according to CodeRabbit's State of AI vs Human Code Generation report analyzing 470 real-world GitHub pull reque…
Data security company Cyera agreed to acquire non-human identity startup Oasis Security for approximately $1 billion, a deal that underscores the industry's recognition that AI agents are running in p…
C1 launched Agentic Vault, a secrets vault built into identity governance that secures exposed credentials found by shadow AI discovery and governs every secret through the same request, approval, and…
1Password launched 1Password Environments and Developer Watchtower to help teams find and secure improperly stored developer credentials, addressing a 34% year-over-year increase in leaked secrets on …
Georgia Tech's Systems Software and Security Lab has confirmed 74 CVEs directly attributed to AI-generated code in 2026, with the actual number estimated at 400 to 700 cases in the open-source ecosyst…
Orca Security's 2026 State of AI Security Report found that 99.9% of fixable AI vulnerabilities remain unpatched across 1,200+ production cloud environments, with 50% of AI package vulnerabilities now…
AI-assisted 'vibe coding' is causing a surge in security vulnerabilities and leaked secrets, with developers producing code at three to four times the rate but introducing security flaws at ten times …
GitGuardian found 28.6 million secrets exposed in public GitHub commits in 2025, a 34% jump year over year, with over 1.2 million AI-service credentials alone up 81%. To generate a secure API key, use…
Amazon Q Developer's VS Code extension automatically executed MCP server configurations from workspace files without user consent, exposing AWS credentials. Wiz Research disclosed CVE-2026-12957 (CVSS…
AI coding assistants are increasingly exposing credentials in git history, leading to automated credential harvesting and financial losses. A developer lost $12,000 after an AI agent hardcoded an API …
GitGuardian has introduced an MCP server that integrates directly into AI coding agents like GitHub Copilot to enforce real-time security checks on generated code. The tool addresses the challenge of …
Identiverse 2026 in Las Vegas focused on identity security for AI agents, with over 3,800 attendees and 250 speakers. Ping Identity CEO Andre Durand highlighted a shift toward 'actions, not access,' w…
A developer created leak_probe.py, an 80-line Python tool that checks which secrets actually ship in an npm package versus those found in the git repository. Testing showed 6 secret hits in the repo b…
Postman launched Passport, a secure API access system that replaces real API keys with cryptographic credential references bound to the holder, to prevent secret sprawl and leakage in the age of AI ag…
Anthropic made Workload Identity Federation (WIF) generally available on the Claude Platform as of June 17, allowing workloads to authenticate with short-lived OIDC tokens instead of static API keys. …
A developer who has run both approaches in production environments from a 5-person startup to a 200-developer platform org compares AI-based secret scanning with traditional regex-based tools in CI pi…
Attackers are increasingly targeting developer endpoints to steal credentials, as demonstrated by supply chain attacks like Megalodon, TrapDoor, and Miasma. GitGuardian's new Developer Endpoint Protec…
Leakproof, a local-first secret-egress firewall for AI coding assistants like Claude Code and Cursor, launched on Hacker News. The tool intercepts outbound requests to redact or block secrets before t…
This article explains the security risks of accidentally committing API keys and secrets to Git repositories, noting that over 10 million secrets were detected in public commits in 2023. It provides a…
Supply chain attacks on npm and GitHub Actions are exploiting the gap between malicious package publication and CVE issuance, with attackers publishing compromised versions that are installed by thous…