Dark Reading

'GitLost' Flaw Leaks Private Data From GitHub's Agentic Workflows

The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org's public repository and then silently pull data ...

The GitHub Actions Attack Pattern Your CI Security Scanners Miss

ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't ...

AI agent exploits Langflow in first fully autonomous ransomware attack

has documented what it says is the first ransomware operation carried out from start to finish by an autonomous artificial ...
NERDBOT

When AI Agents Outrun Their Safety Net: One Directory That Actually Grades Before You Deploy

Discover the AI Agent Safety Directory that evaluates AI agents before deployment with trusted safety ratings, risk insights, and performance benchmarks.

An agent in the empty chair: Amazon vets launch Primitive Labs, using AI to model customer behavior

Founded by former Amazon AGI and AWS colleagues and backed by a16z Speedrun, Primitive Labs is building AI agents that stand ...