Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

As tech product and service companies strive to become more proactive than reactive when it comes to cybersecurity, many dev teams are adopting security as code principles. By integrating security ...

The Chinese tech giant has listed Claude Code as ‘high-risk’ software, after discovering Anthropic had tracked Chinese users ...

GitLab CE/EE security updates resolve 13 vulnerabilities, including high-severity code execution and information disclosure ...

Symbiotic Security, which is announcing a $3 million seed round today, watches over developers as they code and points out potential security issues in real time. Other companies do this, but ...

China's Alibaba will bar employees from Anthropic's Claude Code, citing back-door security risks and mandating Qoder.

If there's anything that gives a seasoned application security (AppSec) professional indigestion these days, it's the thought of AI-assisted coding layered on top of an already insecure development ...

Vibe coding, where AI generates code from plain language, is rapidly adopted but creates significant security risks. Studies reveal thousands of high-impact vulnerabilities and exposed secrets in live ...

Developers using large language models (LLMs) to generate code perceive significant benefits, yet the reality is often less rosy. Programmers who adopted AI for code generation estimate, for example, ...

This vibe coding cheat sheet explains how plain-language prompts can build apps fast, plus the planning, testing, and security checks needed.