Codex with GPT-6 Sol scores 72.1% FuncPass and 25.1% SecPass for $104 on Azure — 78% cheaper than Astra ($468) — with zero confirmed cheating.

I found a flaw in brig where an agent inside the sandbox plants a symlink resulting in an arbitrary host directory with read-write abilities in and out of the sandbox. Tracked as GHSA-wp6x-29qx-fpr7 ...

A capable frontier model isn’t a controlled system. Here are seven questions security teams should answer before they trust AI coding agents with consequential work.

AI coding assistants help teams ship faster, and that speed is worth keeping. This guide explains how to secure AI-generated code so your developers stay fast while the risky changes get caught. How ...

Rotating keys, purging commits and force-pushing the clean history doesn't guarantee your credential isn't still sitting somewhere it shouldn't. Not all your secrets are truly cleaned up What are ...

Your agent has read access to your repository, issue tracker and web returns. Each of these is a place a stranger can put a sentence, and your agent won't be able to tell yours from the outsider's.

A compromised release of @7nohe/openapi-react-query-codegen runs a dropper on install through three separate triggers, then harvests cloud credentials and republishes itself across npm, RubyGems, and ...

Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in the AppRole authentication configuration that may allow a tenant with limited ...

Endor Labs AI SAST now fully supports C. Scans run in the IDE and on the PR, catching vulnerabilities before code ships, for teams writing C faster than release-gated review can keep up. AI assistants ...

I uncovered 14 critical and high severity vulnerabilities, including multiple unauthenticated prompt-injection to RCE chains, across seven AI orchestration platforms. This research was presented at ...

We ran Claude Code with Anthropic's Opus 5 on the same real-world coding tasks we use for the Agent Security League. The headline is a clear win: 73.7% FuncPass and 32.4% SecPass, still first on ...