One command turns any open-source repo into an AI agent backdoor. OpenClaw proved no supply-chain scanner has a detection category for it

CLI-Anything generates SKILL.md files that AI agents trust and execute. Snyk found 13.4% of agent skills contain critical ...
TMCnet

Guardrail Technologies Launches Traffic Light for Code & AI™; First Security Technology to Verify & Secure AI Code and the People Creating It

Guardrail Technologies, the leading provider of AI security and governance software for enterprises building with AI, today announced the launch of Traffic Light for Code & AI™, which verifies both ...
Hosted on MSN

Why AI code detection matters for developers today

AI-generated code is becoming standard in development, but detecting it accurately is still a challenge. From security and legal concerns to academic integrity, reliable AI code detection tools are ...

AI exposes attacks traditional detection methods can’t see

The more urgent issue is what our detection systems still cannot see — and side-channel attacks are making that gap visible.

Operant AI Launches Endpoint Protector: Securing Shadow AI, Coding Agents, and MCP Across the Enterprise

Operant AI, the leader in AI security, today announced the launch of Operant Endpoint Protector, a new addition to its AI Defense Platform that lets enterprise IT and security teams discover, detect, ...
CSOonline

OpenAI launches Aardvark to detect and patch hidden bugs in code

Currently in private beta, the GPT-5-powered security agent scans, reasons, and patches software like a real researcher, aiming to embed AI-driven defense into the development workflow. OpenAI has ...
csis.org

AI-Driven Code Analysis: What Claude Code Security Can—and Can’t—Do

Q1: How does Claude Code Security function—and how does it differ from traditional static application security testing (SAST)? A1: Conventional rule-based static analysis uses pattern matching, ...

The new rules for AI-assisted code in the Linux kernel: What every dev needs to know

The new rules for AI-assisted code in the Linux kernel: What every dev needs to know ...
The Next Web

The AI industry’s model and agent skill repositories are full of malware. The infrastructure built to accelerate development is now the vector for compromising it.

Hugging Face hosts 352,000 unsafe model issues. ClawHub's registry contains 341 malicious AI agent skills. The AI supply chain is now the most attractive target in software security.