'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit, ...
ADTmag

Java Ecosystem Advances with Strict Field Initialization JEP Amid Cross-Platform Malware Threats

The global Java development ecosystem experienced significant structural changes this week following the introduction of a new OpenJDK enhancement draft alongside warnings from cybersecurity ...

Chinese hackers develop LONGLEASH malware to expand ORB network

Chinese hackers tracked as 'UAT-7810' are actively evolving their malware to expand their Operational Relay Box (ORB) network ...
Infosecurity Magazine

UK Healthcare Sector Records Tenfold Increase in Cyber-Attacks

The UK’s healthcare sector is being “stress-tested to breaking point," with a tenfold increase in attacks during January-May ...
SiliconANGLE

Snyk launches Evo Agentic Development Security to police AI coding agents

Cybersecurity company Snyk Ltd. today launched Evo Agentic Development Security, a new layer of its artificial intelligence security platform built to police the autonomous coding agents that ...
The Verge

Read this before you vibe-code another app

Bob Starr was delighted with his vibe-coded website. “Boomberg” showed how much US tax money is going to tech companies, and Starr launched it online immediately after making it. It wasn’t until ...
CNBC

OpenAI to acquire Ona to support its AI coding assistant, Codex

OpenAI announced it will acquire Ona, a startup that provides cloud environments for AI agents. Ona's technology will allow OpenAI's coding assistant, Codex, to take on longer-running tasks, OpenAI ...
heise online

SAP Patchday: Critical vulnerabilities in SAP NetWeaver and other weaknesses

In addition, SAP has updates for other security flaws in store. SAP links the security notes and associated updates in the patch day overview. Admins should check if they are using vulnerable SAP ...
SDxCentral

Broadcom injects security updates into Spring, Java ecosystems

Broadcom rolled out security updates to the Spring and Java ecosystems tied to helping organizations navigate a surge in AI-detected security threats. The updates are through Broadcom’s Tanzu business ...
Morningstar

Salt Security launches Salt Code, the first agentic security solution to enforce security policies inside AI coding assistants

The first solution that enforces security policy inside every AI coding assistant your developers use. Claude, Cursor, GitHub Copilot, Windsurf, Codex and Gemini CLI now generate policy-compliant code ...
Ars Technica

Fed up with vibe coders, dev sneaks data-nuking prompt injection into their code

The controversy over vibe coding reached a new high this week after a developer added hidden instructions to his open source Java testing app to sabotage projects performed by AI coding agents. The ...
Business Wire

Detectify Launches MCP Server to Secure the Autonomous Coding Loop

As AI agents take over the software lifecycle, Detectify embeds continuous, autonomous security validation directly into AI-driven development workflows STOCKHOLM--(BUSINESS WIRE)--Detectify, the ...