Using AI to code does not mean your code is more secure
…It has more than 300 security advisories and appears to have been heavily vibe-coded, but most AI traces have been stripped away. We can only confidently confirm around 20 cases with…
Search
Microsoft Azure CTO says Claude found vulns in Apple II code
…in the near future, given how effective models have become at finding long-hidden bugs and security issues." Although the title of Anthropic's post focuses on making these capabilities available to…
Ransomware crims abused Cisco 0-day weeks before disclosure
Security Ransomware crims abused Cisco 0-day weeks before disclosure, says Amazon security boss Interlock's post-exploit toolkit exposed Ransomware criminals exploited CVE-2026-20131, a maximum-severity bug in Cisco…
Apple is working on passcode bug locking out iPhone users
…We're told that Apple started working on a bug fix internally a few days after Byrne's cry for help on social media, and a few days before we published our…
MCP 'design flaw' puts 200k servers at risk: Researcher
Security Anthropic won't own MCP 'design flaw' putting 200K servers at risk, researchers say Bug or feature? A design flaw – or expected behavior based on a bad design choice, depending on…
Anthropic Mythos model can find and exploit 0-days
…to participate in this introspective bug hunt, subsidized by up to $100M in usage credits for Mythos Preview and $4M in direct donations to open-source security organizations. If that sounds a…
Microsoft releases emergency fix for account internet error
…resolve bugs introduced by a Windows patch just days after promising improved reliability. The fix , shipped over the weekend, addresses a Microsoft account issue caused by the March 2026 security update – the…
Google: Spyware vendors, China-linked spies led 0-day abuse
Security Google says spyware makers and China-linked groups dominated zero-day attacks last year Of the 90 zero-days GTIG tracked in 2025, 43 hit enterprise tech Zero-day exploitation targeting…
Claude attacks were 'Rorschach test' for infosec community
…thinks they need to become "exceptional" at security basics. The more tokens you spend, the more bugs you find, and the better quality those bugs are. You can also see it in…
Claude Code ignores ignore rules meant to block secrets
…We asked Claude to read the .env file and it did so – which would not happen if Claude respected .claudeignore entries. This has potential security implications, particularly for agents – these tool-enabled…