GitLab warns of max severity code execution vulnerability

GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that ...

Even SHA pinning has been bypassed. The true nature of the 'Plugin4Shell' zero-click vulnerability that struck Claude Code, Codex, Copilot, and Gemini CLI

IntroductionA vulnerability called 'Plugin4Shell,' disclosed by security firm Air Security on September 17, is sending ...

Noma Labs Uncovers Critical Security Vulnerabilities in Claude Code Desktop App (CVSS 8.7)

Security research team Noma Labs, part of Noma Security, the world's leading agentic security solution, today released details of SneakPeek, an exploit chain discovered in Anthropic's Claude Code ...

The vulnerability storm has begun: AI finds security flaws faster than firms can fix them

AI is accelerating vulnerability discovery and exploitation, widening the gap between vulnerabilities emerging and organisations fixing them. Combined with vulnerability chaining and rapidly changing ...
Help Net Security

AWS Continuum brings AI models to code vulnerability management

AWS Continuum for code vulnerabilities, a system built to handle a vulnerability across its lifecycle, from discovery through to a fix, is now available in gated preview. It reasons over a customer’s ...
Security

SecurityBridge unveils AI-powered Code Vulnerability Analyzer to strengthen SAP security

Caption: SecurityBridge's AI-powered Code Vulnerability Analyzer (CVA) app helps customers understand vulnerabilities in custom ABAP code. SecurityBridge today announced the launch of its ...

Kiteworks patches max severity code injection vulnerability

Secure file-sharing software company Kiteworks has released security updates to address 126 vulnerabilities, including a ...