Vulnerabilities, attacks, software supply chains, application defense, identity, privacy, and compliance.
Postman’s app appears to have auto-installed Codex and Claude Code plugins and self-approved a hook, but no data exfiltration was shown.
Standard OAuth and OIDC leave four dangerous gaps in agentic AI deployments — here's what identity teams should verify now.
CISA's October 20, 2026 KEV update lists six actively exploited flaws across Plex Media Server, EG Secure Solutions SiteGuard, and Siemens Software Center. Here's what defenders need to patch and verify now.
Attackers published malicious LiteLLM 1.107.0 packages to PyPI and Docker. Here’s what the reporting says happened, what secrets were targeted, and what operators should do now.
With 7 billion passkeys deployed globally, enterprises face three operational challenges: attestation policy, account recovery under lockout, and step-up authentication for sensitive actions after passwordless login.
