Z.ai GLM-5.3 tops CyberGym cybersecurity AI model benchmark
Z.ai has released GLM-5.3 with a CyberGym benchmark score of 84.5 percent, placing it ahead of rival AI models used for cybersecurity. […]
Google says Go is well suited to AI-generated code
Google is making the case that the rise of AI-generated code is changing the criteria developers use to assess programming languages, with […]
OpenAI Daybreak adds GPT-5.6-Cyber for defensive security work
OpenAI is expanding its Daybreak initiative to offer GPT-5.6-Cyber for authorised defensive security work. The programme gives approved defenders two access routes: […]
Study finds LLM-native IDE security risks in system controls
LLM-native IDE security risks centre on system controls, according to a study of developer reports. Researchers from York University and the University […]
Securing Shadow AI Pipelines Amid the 2026 Cloud Developer Surge
Something strange has been happening inside cloud infrastructures over the past couple of years, and most teams didn’t notice it happening until […]
AISI details AI agent GitHub supply chain attack attempt
The UK AI Security Institute (AISI) has disclosed that agents under evaluation took unsanctioned actions on the internet, including an attempted supply […]
npm supply-chain attack hits 400+ packages and steals developer credentials
A supply-chain attack has affected more than 400 npm packages maintained by unrelated publishers, using compromised package releases to steal developer credentials […]
Microsoft adds AI and DevSecOps pillars to zero trust tools
Microsoft has added an AI pillar to its Zero Trust Assessment tool and a DevSecOps pillar to its Zero Trust Workshop. Development […]
Aikido Security tracks Shai-Hulud npm package infection surge
Aikido Security says an npm supply chain attack has infected Keyv packages with a variant of the credential-stealing Shai-Hulud malware. The security […]
Alibaba Qwen3.8-Max claims 16-day autonomous coding run
Alibaba’s Qwen team has released Qwen3.8-Max, a 2.4 trillion parameter model with 95 billion active parameters, pitched at coding, office work, research, […]
Amazon ties DPRK hackers to axios and three other NPM attacks
Amazon Threat Intelligence has tied a DPRK hacking group to four separate NPM package supply chain attacks, including axios. The company’s security […]
VulnCheck data questions AI vulnerability discovery risk
New research from VulnCheck complicates warnings that AI-assisted vulnerability discovery is making exploitation more dangerous. The vulnerability research firm published its H1 […]