wp2shell: Critical WordPress vulnerability allows code injection via API

By chaining an SQL injection and an API vulnerability, attackers can inject code. WordPress has released an update, the ...
Tech Times

GitHub Copilot App Now Scans In-Flight Code for Vulnerabilities Before Commit

GitHub Copilot security review launched in the desktop app July 14, giving all subscribers — Free tier included — AI-driven ...

We built a vulnerability vending machine: AI tokens in, zero-days out

Intruder built an AI-powered "vulnerability vending machine" that combines code slicing with LLMs to automatically discover ...
Infosecurity MagazineOpinion

Shadow AI is Your New Attack Surface

Shadow AI is your new perimeter. And most organizations don’t have adequate governance in place to defend it. AI adoption for ...

8 Best Agentic AI Security Companies for Prompt Injection & Secret Sprawl Defense

Chatbots now place orders, code assistants push updates, and autonomous agents comb production databases while you sleep.

Claude helped uncover a ticketing flaw able to unlock free VIP festival passes (Update)

Claude helped expose a critical flaw in a major festival ticketing platform that could've unlocked VIP passes and admin access.

Claude Helped a Hacker Find a Way to Issue Tickets to Almost Every US Music Festival

A researcher found that using Anthropic’s Claude Opus 4.7, he could break into the website of Front Gate—used by every festival from Lollapalooza to Bonnaroo—and freely issue any ticket he chose.
The Hacker News

Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data

The issue affects GitHub Agentic Workflows setups that read public input, hold private repo access, and can post output ...
Rutland Herald

Sygnia Investigation Finds AI Accelerated Attack Enabled Lone Threat Actor to Rapidly Compromise Enterprise Cloud Environment

Rather than relying on novel malware or zero-day exploits, the threat actor used AI to execute multiple well-known cloud ...