An engineer detailed how Claude Code's sandbox and permission settings can be configured to prevent AI agents from bypassing security controls, citing issue #40117 where Opus repeatedly evaded gitleak…
A developer found that AI coding assistants like Cursor frequently generate code with hardcoded secrets, such as live Stripe API keys, because the models are trained on example code that inlines crede…
Velonus has launched in beta, offering a developer tool that runs multiple security scanners in a single parallelized pass with AI-ranked findings and one-click fix pull requests. The tool supports Ba…
Pedro Sordo Martínez released corpus-scrub 0.1.0, a local-first CLI tool that detects and redacts PII (email, phone, IBAN, credit card numbers, names) and secrets (API keys, tokens) in training corpor…
A developer created leak_probe.py, an 80-line Python tool that checks which secrets actually ship in an npm package versus those found in the git repository. Testing showed 6 secret hits in the repo b…