Anthropic introduced a new cybersecurity initiative that reflects both the promise and the deep unease surrounding AI, enlisting a rare alliance of industry heavyweights including Amazon, Microsoft, Apple, Google, and NVIDIA. The program, known as Project Glasswing, brings these firms together with cybersecurity and infrastructure partners to test a powerful AI model designed to identify...Read More
Identifying vulnerabilities and exploits with Claude Mythos Preview Over the past few weeks, we have used Claude Mythos Preview to identify thousands of zero-day vulnerabilities (that is, flaws that were previously unknown to the software’s developers), many of them critical, in every major operating system and every major web browser, along with a range of...Read More
London-based Trent AI has raised $13 mn, in seed funding as it comes out of stealth with a layered security product built for the agentic AI market. LocalGlobe and Cambridge Innovation Capital led the round. Trent AI enters the market as companies push AI agents and autonomous workflows into production faster than security teams are...Read More
Even as organizations recognize the importance of application security, most still struggle to operationalize it at scale. That gap becomes harder to ignore as development accelerates, AI becomes embedded in workflows, and software supply chains grow more complex. *** This is a Security Bloggers Network syndicated blog from 2024 Sonatype Blog authored by Aaron Linskens....Read More
Permiso has launched SandyClaw, a dynamic sandbox for AI agent skills that it describes as the first product of its kind. The launch addresses a growing security concern around downloadable skills that AI agents use to interact with tools, application programming interfaces and online services. According to Permiso, attackers have already begun placing malicious skills...Read More
As organisations grapple with expanding attack surfaces and increasingly sophisticated threats, the importance of strong security fundamentals and clear visibility has never been greater. Quentyn Taylor, Senior Director of Information Security at Canon Europe, Middle East and Africa, tells us why overlooked risks such as compromised credentials, alongside the rise of AI-driven threats, demand a...Read More
Third executive appointment of 2026 signals continued investment in AI-driven product security and software supply chain leadership. COLUMBUS, Ohio–(BUSINESS WIRE)–#AI–Finite State, a leader in product security and software supply chain risk management, today announced the appointment of Ann Miller as Vice President of Marketing. Miller brings more than 15 years of experience scaling high-growth technology...Read More
As geopolitical conflict spills into cyberspace, digital assets emerge as a new attack surface with vulnerabilities extending far beyond the blockchain itself to private keys, digital signatures, exchanges, APIs, and, mostly, human behavior, as pointed out by Dr. David Utzke. PRESCOTT, Ariz., April 7, 2026 /PRNewswire/ — As geopolitical conflict increasingly spills into cyberspace, digital assets...Read More
Insights from RSA Conference attendees highlight visibility and control challenges as AI-driven access expands within organizations SAN FRANCISCO, April 7, 2026 /PRNewswire/ — Keeper Security, the leading zero-trust and zero-knowledge identity security and Privileged Access Management (PAM) platform, today highlights a widening gap in enterprise security as organizations expand the access of non-human and AI-driven...Read More
Vibe coding is rising astonishingly quickly, but even developers who use it don’t always trust its outputs. SAST tools remain critical for enforcing policies, spotting vulnerabilities, and preventing serious errors from propagating through systems. Human-written source code is becoming almost quaint, as AI-generated code takes over. Recent research shows that 42% of the code produced...Read More
