Security & Privacy Engineering

3+ hour, 10+ min ago   (337+ words) Home / Tech news Z.ai just open-sourced ZCode coding agent, after developers found that the app just packaged and uploaded workspaces and Git histories. Z.ai just issued a statement and explained that the background uploads were caused by Repo Wiki and…...

10+ hour, 28+ min ago   (416+ words) Every identity-compromise runbook I have written, read or inherited has the same step near the top: revoke the tokens. Reset the password, kill the sessions, invalidate the refresh tokens, then go hunting. It is the right instinct. Against adversary-in-the-middle phishing,…...

16+ hour, 43+ min ago   (238+ words) From a Magento zero-day to a surge of state privacy fines, here's what shaped risk for software leaders this September. If your platform touches e-commerce in any way, whether you build on Magento, integrate with it, or simply sell to…...

1+ mon, 2+ week ago   (100+ words) AUSTIN, Texas, Aug. 3, 2026 New solution extends HiddenLayer's AI Runtime Security module to secure AI coding agents as they read code, run commands, modify files, and interact with developer systems. With Agent Harness Security, organizations can: HiddenLayer's Agent Harness Security solution…...

3+ day, 12+ hour ago   (728+ words) Researchers at cybersecurity startup AIR found and reported the flaw, which they are calling Plugin4Shell, to the vendors concerned, and most of them have now released a patch for it, the researchers wrote in a blog post on Thursday. It’s “a…...

1+ day, 2+ hour ago   (598+ words) AI did not invent software supply-chain risk. It accelerated how fast untrusted code, models, and packages enter your build graph—often with weaker review than a human-written dependency. You still need the boring control plane: where packages resolve from, who…...

1+ day, 3+ hour ago   (854+ words) If you use an AI coding assistant, you already accept that it sees the code in your current task. What you probably do not expect is for the app to package your entire repository, including every commit you have ever…...

1+ day, 19+ hour ago   (262+ words) Coding agents are good at writing code and bad at knowing when they're wrong. I've watched an agent confidently ship a broken change, add a dependency that was published 20 hours ago, or quietly leak a secret into a commit message....

1+ day, 22+ hour ago   (295+ words) Most supply chain security tools react. They scan your package-lock.json or go.sum, flag known vulnerabilities, and let you decide whether to upgrade. By the time Snyk or Dependabot alerts you, the dependency is already in your codebase. If…...

1+ day, 21+ hour ago   (30+ words) Sometimes the most convincing proof that a leak matters isn’t your own argument — it’s the target’s own code …...