First up we talk with Threatlocker CTO Michael Jenkins about threat actors use of AI and keeping the bad things out with Zero ...

Since the release of Vue 2, Vuejs has grown rapidly. It is receiving awesome reviews from the users. Vuejs was one of the ...

Cycode has disclosed a high-severity OAuth vulnerability in Anthropic’s official Model Context Protocol (MCP) Python SDK that ...

ControlTheory CTO Eric Anderson describes a production chat failure investigated with Dstl8 and passed to Claude Code. His ...

You have written the code to call an API. However, when authentication errors or timeouts occur, you don't know what to check ...

I often see the word 'API,' but I don't know what it does.Why is an API key necessary when using AI or web services from ...

Exploiting Unauthenticated API Gateways in AWS September 21, 2026 sara.pearlman@guidepointsecurity.com BLOG  5 min. Over the past year, GuidePoint’s Threat and Attack Simulation (TAS) team has ...

A new phishing kit abuses a legitimate Microsoft device authorization flow intended for use with printers or smart TVs to steal authentication tokens, register attacker-controlled devices and gain ...

Nearly one in ten of the internet-facing LiteLLM servers that Wiz Research scanned in February accepted sk-1234, the example admin key in LiteLLM's own setup guide. LiteLLM is an open-source AI ...

One afternoon earlier this month, I pulled up to the rec center and realized that I had a problem. It was not the three boisterous tweens in the back seat who were clamoring to be set loose in the ...

This week’s bulletin captures a cybersecurity landscape increasingly shaped by artificial intelligence, both as a weapon and a shield. A ransomware affiliate weaponized Claude Code to autonomously ...