JFrog's security team exposed a wave of fabricated SQLite vulnerability advisories, including a fake CVE-2026-51302 that was initially rated 10.0 critical, which had flowed through NVD, CISA, and Red …
In a podcast, Tracy Bannon, Senior Principal Software Architect and DevOps Advisor at MITRE, discussed the risks of agentic AI in software development, emphasizing that AI agents crossing system bound…
Cursor, the AI code editor used by 70% of the Fortune 500, has earned AIUC-1 certification for agent security and reliability after an independent audit by Schellman and adversarial testing across tho…
AI coding tools now generate 42% of committed code, projected to reach 65% by 2027, yet the security pass rate has stalled at 55% since 2023, according to Veracode's July 2026 GenAI Code Security Repo…
The Artificial Intelligence Underwriting Company published AIUC-1, a standard for AI agents covering data privacy, security, safety, reliability, accountability, and societal risk, with contributions …
NATO's Cyber Security Centre and AI startup AISLE have joined the CVE program as numbering authorities under the ENISA Root, enabling them to assign unique identifiers to software vulnerabilities, the…
Lovable has become the first AI coding agent platform to earn AIUC-1 certification, the industry's first security, safety, and reliability standard for AI agents. Developed with input from Stanford, M…
JFrog Security Research reported that 54 of 55 CVE advisories published from a new GitHub account were AI-hallucinated, with six targeting SQLite and all six entering the National Vulnerability Databa…
A GitHub account published 55 security advisories for SQLite, 54 of which were fabricated and one contained a real bug, according to a JFrog audit. The NIST National Vulnerability Database (NVD) regis…
JFrog reported that six SQLite CVEs published by a new GitHub repository were fake, likely AI-generated, with CVSS scores ranging from 9.8 to 7.5, and none described a reproducible vulnerability. The …
JFrog's security research team found that 54 of 55 SQLite advisories filed as critical CVEs were fabricated by an AI language model, including CVE-2026-51302, which was withdrawn four days after publi…
X-cmd v0.9.14 adds two command-line modules, `x cve` and `x cwe`, for querying CVE vulnerability IDs and CWE weakness categories, respectively. Founder and CEO Edwin Lee argues that as AI agents mass-…
AttackIQ co-founder and MITRE Center for Threat-Informed Defense co-founder Jon Baker introduced the Threat-INFORM maturity model at the FIRST Conference in Denver, arguing that security programs must…
Seventy-one percent of organizations say AI has access to core business systems, but only 16% govern that access effectively, according to the 2026 CISO AI Risk Report. AI incidents surged 56.4% from …
A group of AI researchers launched FLARE-AI, a crowdsourced website for reporting and tracking AI harms, enabling users to flag issues like malware generation or privacy leaks. The open-source system …
The Linux Foundation announced Akrites, a coordinated effort to remediate vulnerabilities in open source software. The initiative provides a shared Security Incident Response Team to handle vulnerabil…
An open-source repository containing 817 structured cybersecurity skills for AI agents has been released, covering 29 security domains and mapping to six industry frameworks including MITRE ATT&CK and…
Longer timelines for AGI development may reduce accidental misalignment risks but increase risks from deliberate misuse and sabotage, according to a vulnerability researcher. The author argues that as…
A developer built a SOC triage tool called TriageLens that separates detection from AI-generated reporting. The tool uses deterministic TypeScript code for parsing, detection, and risk scoring, with A…
The article describes an AI-powered Virtual SOC Analyst tool, hosted at analista.byronlainez.click, that uses Gemma 4 to rapidly analyze AWS security logs (such as CloudTrail, WAF, and Nginx) and dete…