DevSecOps

Exposed Vite servers are being probed for AWS and Azure credentials

Attackers are scanning internet-exposed Vite development servers for environment files, cloud credentials and infrastructure configuration.

A maximum severity GitLab flaw could turn your CI/CD server into an attacker’s treasure trove

The vulnerability impacts self-managed CE and EE instances and provides an unauthenticated path to arbitrary file reads. It’s already being probed in the wild.

OpenClaw rolls out system-wide overhaul, updates security controls across agent platform

The release spans runtime, plugins, and secret handling as the project describes an evolution into ‘OpenClaw 2.0.’

Critical flaw patched in popular JavaScript sandbox used in AI projects

The type confusion vulnerability allows a guest-to-host sandbox escape which can lead to remote code execution

Get a Jump on Reducing Your Open Source Software Security Risks

Critical GitLab flaw allows attackers to delete and modify public repos

Attackers don’t need credentials or user interaction to exploit the flaw which could enable supply chain attacks in self-hosted code repositories.

AI can find zero-days but still can’t reliably write secure code

Enterprises are facing a critical cyber asymmetry issue as AI models’ offensive and defensive capability gaps grow.