Leaked API keys are nothing new, but the scale of the problem in front-end code has been largely a mystery - until now. Intruder’s research team built a new secrets detection method and scanned 5 ...

A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious ...

The OWASP-backed tool scans JavaScript and TypeScript lockfiles locally, aiming to help developers catch and remediate dependency risks before CI failures.

A security flaw in “Claude in Chrome” enables any Chrome extension, including those without permissions, to execute ...

The rapid advancement of AI and agentic technologies has been dominant in the cybersecurity space in 2025 — with early-stage startups playing a central role in helping to protect the emerging AI ...