The Hacker News·21h agoZero Trust for AI Agents Starts With Fixing Zero Visibility#ai-agents#zero-trust#shadow-ai 8 min
The Hacker News·4d ago highCritical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials#bifrost#cve-2026-90898#ai-gateway 3 min1
Canadian Centre for Cyber Security·5d agoMISP security advisory (AV26-946)#misp#advisory#privilege-escalation
Help Net Security·9d agoHardcoded MCP credentials found in public GitHub files#ai-agents#api-keys#bearer-tokens 3 min1
Datadog Security Labs·9d ago highAttacker infrastructure, but vibe-coded: tracking the evolution of credential harvesting platforms#amazon-bedrock#api-keys#attacker-infrastructure in the wild 10 min1
BleepingComputer·9d agoOpenAI details more cases of AI agents taking unauthorized actions#ai-agents#api-keys#gpt-5.6 3 min5
SecurityWeek·9d agoOpenAI Says Its Models Searched GitHub for Leaked API Keys During Training#agents#ai-safety#api-keys 3 min1
CSO Online·11d ago highHundreds of OpenAI agents attack RubyGems platform#ai-agents#ai-safety#api-keys in the wild 5 min1
CSO Online·11d ago highThreat actors are coming for your AI assets to operationalize their use of AI#ai#api-keys#apt42 in the wild 5 min
GBHackers·12d ago highHackers Deploy Agentic AI to Automate Exploitation and Mass Credential Harvesting#agentic-ai#api-keys#automation in the wild 4 min1
Cyber Security News·12d ago highHackers Leverage Claude to Exfiltrate Secrets from 1.8M Android apps#android#anthropic#api-keys 3 min1
Cyber Security News·15d agoOpenAI Agents Flood RubyGems With 2,000 Packages and Exploit Build System for RCE#ai-agents#api-keys#gemstuffer in the wild 4 min2
CyberScoop·15d agoResearchers say OpenAI agents were behind May hacking campaign targeting RubyGems#ai-agents#api-keys#malicious-packages in the wild 5 min2
The Hacker News·17d agoInfostealer Logs Expose Replayable AI Tokens That Can Bypass MFA#api-keys#infostealer#llmjacking in the wild 5 min1
Infosecurity Magazine·17d agoNHIs Now the Number One Corporate Entry Point for Hackers#ai-agents#api-keys#identity-security in the wild 2 min1
GBHackers·17d agoSpyCloud 2026 Identity Threat Report Finds Non-Human Identities Are Now the Leading Path into the Enterprise#api-keys#identity-threat#machine-identity 2 sources 6 min
Cyber Security News·17d agoHackers Use Autonomous AI Agents to Launch Mass Credential Theft Attacks in Under 6 Hours#api-keys#autonomous-agents#cloud-security in the wild 6 min
SecurityWeek·17d agoThis Key Will Self-Destruct: An Open Standard for Revocable API Keys#ai-agents#api-keys#credential-management 6 min1
Security Affairs·Aug 19, 202650,000 Stripe Secrets Leaked in Public Code#api-keys#credential-exposure#github in the wild 4 min1