Blog

Your Engineers AI Coding Sessions Are Already for Sale. MFA Won't Stop the Buyer.

Infostealer malware now harvests live authentication tokens from AI coding agents like Claude, Cursor and Codex. Two September 2026 research reports show why multi-factor authentication does nothing to stop a replayed session token.

Your Engineers AI Coding Sessions Are Already for Sale. MFA Won't Stop the Buyer

Qwen 3.8 Launched Friday. By Monday, It Had No Guardrails Left.

Alibaba's Qwen 3.8 27B was stripped of its safety refusals within days of release, the latest sign that model guardrails are a fine-tune away from gone. Here is what that means for anyone deploying AI agents in production.

Qwen 3.8 Launched Friday. By Monday, It Had No Guardrails Left

ai-cybersecurity

Your AI Agent Says the Vulnerability Is Fixed. There's a Coin-Flip Chance It Isn't.

New research from 1Password's Off-by-1 Labs found that AI-generated vulnerability patches fail to fully resolve the underlying flaw more than half the time, raising the stakes for independent evaluation of agentic security work.

Your AI Agent Says the Vulnerability Is Fixed. There's a Coin-Flip Chance It Isn't

ai-cybersecurity

ai-agentic-security

Your Company's Copilot Just Became the Attacker's Best Employee

A Barracuda Networks red-team simulation shows how a compromised employee account and its built-in AI email assistant can be chained into a quarter-million-dollar wire fraud, without a single exploit.

Your Company's Copilot Just Became the Attacker's Best Employee

ai-cybersecurity

ai-agentic-security

One Engineer Clicked "Allow All." Attackers Read Production Secrets Three Hops Later.

How the April 2026 Vercel breach escalated from an infostealer infection at an AI vendor to exposed production secrets, and what it means for auditing AI tool integrations.

One Engineer Clicked "Allow All." Attackers Read Production Secrets Three Hops Later