Updates on Software Security
Every AI story we track on Software Security: 52 stories so far, each summarized in our own words and linked to the publisher that reported it.
Pulled from 125 sources
This week
Cybersecurity5 min read
Cognition Open-Sources an Agent Plugin that Helps Secure Systems against Recent Cybersecurity Threats
MarkTechPost
Cybersecurity2 min read
OpenAI resumes frontier AI training after security overhaul, discloses flaw in widely used software
ET AI (The Economic Times)
A.I. Discovered a Critical Vulnerability in PHP, a Coding Language Behind Many Websites
Covered by 5 sources
Cybersecurity6 min read
Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances
The Hacker News
Cybersecurity2 min read
Chinese hackers spied on thousands of companies after breaching IT giant ConnectWise
Covered by 2 sources
Cybersecurity4 min read
OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL
The Hacker News
Cybersecurity4 min read
PHP knew about one of the flaws in 2024 but could not agree a fix
The Next Web
Cybersecurity4 min read
Anthropic set Claude on 25 open-source projects and it found 493 flaws
The Next Web
Cybersecurity6 min read
Anthropic Adds Continuous Scanning and Fix Tracking to Claude Security
Unite.AI
This month
Cybersecurity3 min read
XBOW used GPT-5.6 Sol to build a $250,000 Chrome exploit in six days
The Next Web
Cybersecurity3 min read
Microsoft fixes a record 1,400+ flaws, and one is already under attack
The Next Web
Cybersecurity4 min read
Hackers hijacked 1,900 GitHub accounts. Then they went after 30,000 repos.
The New Stack (AI)
Cybersecurity3 min read
Bank of America hired contractors to protect its software from powerful rogue AI agents
Covered by 2 sources
Cybersecurity10 min read
GitHub’s model for secret detection: Finding more secrets with less noise
GitHub Blog (AI & ML)
Cybersecurity11 min read
The Credential Layer Is Expanding Faster Than Security Teams Can See It
The Hacker News
Cybersecurity5 min read
DeepKeep Adds Runtime Guardrails for AI Coding Agents With AI Lens for Developers
Unite.AI
Cybersecurity9 min read
Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore
The Hacker News
Cybersecurity4 min read
Meta’s Muse AI Agent Has Been Downloaded Half a Million Times — With a Serious Bug
CNET
Cybersecurity5 min read
Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents
The Hacker News
Cybersecurity2 min read
Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories
The Hacker News
Cybersecurity5 min read
Don’t Let Security Ruin the Vibe: How Any-sized Business Can Protect the Momentum Behind a New Product
Unite.AI
Cybersecurity1 min read
AI agents being tested by OpenAI involved in cyber-attack on another service, say researchers
Covered by 2 sources
Cybersecurity6 min read
Anthropic reveals rogue AI agents hate CAPTCHAs, just like you
Covered by 2 sources
Cybersecurity3 min read
Google Open-Sources Mantis: A Modular Skills Toolkit That Lets Coding Agents Find, Reproduce and Patch Vulnerabilities
MarkTechPost
Cybersecurity2 min read
OpenAI,Anthropic etc. 100 companies call for action to defend against rogue AI
Covered by 5 sources
Dev5 min read
I pointed my AI security plugin at my own prod app – it refused to invent a bug
Hacker News
Cybersecurity2 min read
China warns of "security backdoor" in Anthropic AI coding tool [July 8, 2026]
Hacker News
Dev3 min read
Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Development
The Hacker News
Cybersecurity7 min read
Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports
The Hacker News
Cybersecurity7 min read
Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug
The Hacker News
Anthropic’s Claude Mythos found 10,000 critical vulnerabilities in one month. The patches can’t keep up.
The Next Web
Mercor says it was hit by cyberattack tied to compromise of open-source LiteLLM project
TechCrunch
That's everything we have on Software Security right now