A security measurement found 33,005 internet-reachable LiteLLM gateway instances following CVE-2026-59822, an authentication bypass in LiteLLM's MCP Streamable HTTP endpoint that was fixed in version …
A critical authentication bypass in LiteLLM's MCP Streamable HTTP endpoint, tracked as CVE-2026-59822, allowed unauthenticated callers to list and invoke gateway-configured MCP tools by sending a forg…
Pulumi released Neo Security in research preview this week, an AI agent that scans cloud environments, validates which vulnerabilities are actually exploitable via live cloud API queries, and opens a …
Wiz and Google Security Operations have deepened their integration, adding a shared data model, the official Wiz Content Pack, and Wiz Blue Agent AI threat analysis directly into Google Security Opera…
GreyNoise reported that a threat actor used hundreds of AI agents built on OpenAI's Codex and DeepSeek models to develop and launch exploits against two known PaperCut NG/MF vulnerabilities, compromis…
Nearly 1 in 10 publicly accessible LiteLLM instances accept a default master key or require no authentication, exposing cloud AI infrastructure to root-level remote code execution and IAM theft, accor…
Google released Gemini 3.8 Flash Cyber on September 2, an AI model for autonomous vulnerability discovery and patch generation, alongside the Fairwind access program for 650+ vetted organizations. The…
Google launched Gemini 3.8 Flash and Gemini 3.8 Flash Cyber, its third Flash model in six weeks, targeting complex reasoning, software development, and automated cybersecurity. The models are priced a…
Wiz published a four-pillar framework for AI threat readiness on September 18, 2026, warning that frontier AI models can now autonomously discover zero-day vulnerabilities, generate working exploits, …
Aikido Security leads the 2026 DSPM market with a code-based approach that traces sensitive data through application code, identifying exact file and line exposures with pull-request fixes in minutes,…
Wiz has launched Continuous Vulnerability Assessment (CVA), a new scanning model that updates its vulnerability catalog in real time and reassesses exposure immediately upon a new vulnerability's publ…
On August 4, 2026, a malicious commit to the npm package 'keyv' triggered a supply-chain worm that compromised over 400 packages (Elastic) or over 1,300 package versions (Singapore's CSA), totaling mo…
Wiz, a cloud security company, built an AI-powered data classification system that evolved from a public bucket scanner into a context engine running across all data surfaces, including IaaS and SaaS.…
Jock, a developer who spent ten months living in Claude Code's terminal, describes eight failed attempts to find a better interface for managing AI agents before finally succeeding on the ninth. He ar…
Wiz Cloud Cost is now supported in the Wiz Service Catalog, automatically mapping cloud and AI spend to services to drive cost attribution. The integration enables service-level cost allocation withou…
OpenAI has appointed Dali Rajic, former president and COO at Wiz, as its new chief revenue officer, succeeding Denise Dresser, who stepped down after less than a year. Rajic, 53, known for his discipl…
GitHub spent seven and a half hours down on Monday, taking Pull Requests, Actions, and Copilot with it, while security firm Wiz claimed its autonomous 'Red Agent' broke into Snowflake's internal Jira …
OpenAI executive Chris Malone, who served as head of data centers, has left the company, an OpenAI spokesperson confirmed Monday. His departure follows a series of executive exits at the ChatGPT maker…
After nearly a year of use, GitHub Copilot remains best-in-class for inline autocomplete but lags behind rivals like Cursor for deep project understanding and multi-file edits, according to a develope…
OpenAI named Dali Rajic, former president and COO of Google-owned cybersecurity firm Wiz, as its new chief revenue officer in mid-August, replacing Denise Dresser after less than a year in the role. R…