Trivy attack force-pushed 75 tags via GitHub Actions, exposing CI/CD secrets, enabling data theft and persistence across developer systems.

Zerion API integrated the x402 protocol. Any AI agent with a crypto wallet can now make an API call, pay 0.01 USDC on Base, and get back structured wallet data: portfolio balances, DeFi positions, ...

Hackers have compromised virtually all versions of Aqua Security’s widely used Trivy vulnerability scanner in an ongoing ...

GitGuardian’s 5th State of Secrets Sprawl report is here. In this blog, we unpack the key findings behind the 2026 edition, ...

OpenClaw's Peter Steinberger warns all crypto emails tied to the project are scams as fake $CLAW airdrops target GitHub devs.

AI-driven development fueled a surge in developer secrets leaks last year, with nearly 29m credentials discovered on public GitHub repos.

Google Antigravity with Gemini 3.1 pairs with Firebase to easily build apps with sandbox payments, webhook verification and ...

Vibe coding apps ship with alarming security flaws. What founders need to know about AI-generated code vulnerabilities in ...

I stopped just 'chatting' with AI and started shipping. I vibe-coded a functional app in 48 hours—here is the exact, no-code ...

PetClaw AI today announced the release of its new autonomous desktop AI companion, designed to help users complete tasks ...

OpenClaw is already running inside enterprises, often unnoticed. Learn why banning it fails and how CISOs must shift to ...

As AI agents spread, 1Password's new tool tackles a rising security threat ...