GitHub and PyPI are implementing new measures to better protect software developers against attacks via the software supply ...

MCP is standardizing how AI agents connect to tools and data, replacing custom integrations with reusable servers. Here's how ...

Researchers escaped the sandboxes in Cursor, Codex, Gemini CLI, and Antigravity by exploiting files trusted host tools run.

AI agent security now has a purpose-built open-source guardrail: Ant Group released SingGuard-NSFA, a free framework that catches prompt injection and credential-theft patterns before AI agents ...

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your security tools look.