2+ day, 6+ hour ago   (207+ words) Automox has announced its AI-speed Mitigation Worklet Pipeline, which automates mitigation to reduce risk from the increased volume and velocity of frontier-model AI vulnerabilities. Now the time from vulnerability disclosure to exposure mitigation is shortened from days or weeks to…...

2+ day, 22+ hour ago   (305+ words) Google turned on a transfer feature in Android that moves passwords and passkeys straight from one password manager to another, with no file to download along the way. You start it from inside the app you are switching to, and…...

3+ day, 4+ hour ago   (460+ words) WordPress’ automated security review will now assess every plugin release before it is distributed through the WordPress.org update API. Releases considered a potential security risk will be blocked automatically. “A plugin can be secure today and introduce a vulnerability,…...

3+ day, 8+ hour ago   (730+ words) Credential harvesting on developer machines has widened. Earlier infostealers worked from a short list of known targets, mostly browser stores and a few cloud credential paths. The families active now cast a much wider net. Shai-Hulud, for instance, ran a…...

4+ day, 31+ min ago   (203+ words) AI agents today do more than answer questions. They access databases and applications, execute workflows, and make decisions inside live production environments. Traditional access controls can determine whether an agent is allowed into a system, but not whether every action…...

4+ day, 57+ min ago   (21+ words) Orchid Security adds drift detection and kill switches for AI agents to help enterprises control access as autonomous AI adoption scales....

4+ day, 4+ hour ago   (292+ words) Securin has announced the general availability of the Securin Platform, an AI-native Preemptive Exposure Management platform designed to answer three questions security teams struggle with every day: What can attackers actually exploit? What should we fix first? And did the…...

4+ day, 9+ hour ago   (275+ words) The open source cleaner BleachBit reached version 6.0.4 this week, erasing caches, browser traces, and files on Windows, Linux, and now macOS. If you shredded a sensitive file on Windows with an earlier build, parts of it may still sit on…...

5+ day, 5+ hour ago   (335+ words) Jellyfin shipped version 12.0 of its media server. Several of the security fixes in it block requests built to reach files outside the folders the server is supposed to hand out. The rest of the security work touches first-run setup, plugin…...

6+ day, 8+ hour ago   (243+ words) ToolHive is an open-source platform that runs Model Context Protocol servers inside containers. An MCP server is the connector that lets an AI client like Cursor or Claude Code reach an outside tool, and Stacklok ships ToolHive under Apache 2.0, so…...