Ravie LakshmananAug 10, 2026Malware / Cybercrime Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named Solidity Pro (“solidity-pro”) that has been observed delivering a browser wallet and credential stealer. The names of the extensions are… Read More "Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials"
7 key trends defining the cybersecurity market today
Prompt Security has built an AI security startup map that covers 367 companies. The breakdown, with companies potentially appearing multiple times, looks like this: AI observability and governance (239 vendors); runtime security and guardrails (188); agentic identity protection (89); MCP… Read More "7 key trends defining the cybersecurity market today"
AI Coding Tools Need Built-In Security for Agentic Development Era
Security must be embedded directly into AI coding tools to mitigate emerging risks associated with agentic development, Ox Security has claimed. Speaking at Infosecurity Europe on June 4, the vendor’s field CTO, Boaz Barzel, explained that traditional application security was built… Read More "AI Coding Tools Need Built-In Security for Agentic Development Era"
OpenAI’s Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause
OpenAI has announced that it’s pausing some “internal activities” involving its upcoming artificial intelligence (AI) model Astra after an internal evaluation found it had made significant advancements in agentic coding and cybersecurity. In response to the discovery, the AI upstart… Read More "OpenAI’s Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause"
OWASP Introduces Agentic AI Security Maturity Framework
The Open Worldwide Application Security Project (OWASP) has rolled out a new agentic AI security maturity framework intended to help organizations close the gap between the agentic systems they deploy and the governance those systems require. The framework appears in… Read More "OWASP Introduces Agentic AI Security Maturity Framework"
Practical Lessons From Lloyds’ Agentic AI Security Playbook
Lloyds Banking Group is treating agentic AI not as a theoretical threat or boardroom buzzword, but as an engineering problem to be designed, constrained and tested at scale. In a candid session at the Open Worldwide Application Security Project’s (OWASP)… Read More "Practical Lessons From Lloyds’ Agentic AI Security Playbook"
Critical Flaws Discovered in Belgian eID Software Used by 2 Million People
DEF CON — A security researcher has revealed severe, now-resolved security vulnerabilities in the Connective digital identity system, a browser extension used by over two million users in Belgium. Developed by Nitro Software Belgium, the software is used by eight… Read More "Critical Flaws Discovered in Belgian eID Software Used by 2 Million People"
Meta AI Bug Exposes Over 20,000 Instagram Accounts
Unauthorized third parties gained access to thousands of Instagram accounts by exploiting a vulnerability in an AI support tool, Meta has revealed. Meta said it discovered the problem with the AI-powered High Touch Support (HTS) tool on May 31. The… Read More "Meta AI Bug Exposes Over 20,000 Instagram Accounts"
How DSIT Protects Thousands of UK Orgs from Cyber Vulnerabilities
The UK’s Department of Science, Innovation and Technology (DSIT) is responsible for securing over half a million domains across thousands of government organizations. This ranges from the smallest Parish Councils to the behemoth that is the National Health Service (NHS)… Read More "How DSIT Protects Thousands of UK Orgs from Cyber Vulnerabilities"
Two-Thirds of Open Source Community Unaware of Cyber Resilience Act
A leading open source security body has warned of “stagnating awareness and structural unreadiness” in the community ahead of a key December 2027 deadline for compliance with the Cyber Resilience Act (CRA). The CRA is an EU effort to introduce… Read More "Two-Thirds of Open Source Community Unaware of Cyber Resilience Act"