Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

Researchers showed AI agents can be manipulated by hidden prompts to leak sensitive files, highlighting a growing security ...

Nightfall AI today published findings from its annual State of Secrets Report. This research revealed that secrets like passwords and API keys were most often found in GitHub, with nearly 350 total ...

Copilot-enabled repos are 40% more likely to contain API keys, passwords, or tokens — just one of several issues security leaders must address as AI-generated code proliferates. AI coding assistants ...

SearchLeak and a three-CVE LiteLLM chain broke the same AI trust boundary in two weeks. A 5-check audit maps each gap to a ...

AI API Gateway that connects developers to more than 200 AI models through a single OpenAI-compatible endpoint. The platform removes the integration overhead traditionally associated with working ...

At least 15 plug-ins for JetBrains IDEs transmit API keys to an external server, while otherwise offering their promised functions.

The biggest mistake people make when trying to get their ChatGPT API key is that they use the wrong URL. The key can't be found at chatgpt.com. Instead, point your browser to the OpenAI developer ...