Bearer CLI: Free, source-available code security scanning tool (SAST)

Bearer CLI is a free static application security testing (SAST) tool that scans source code for vulnerabilities and prioritizes them by the sensitive data they touch. SAST means the tool reads code without running it. Organizations can use it freely, w… Continue reading Bearer CLI: Free, source-available code security scanning tool (SAST)→

Half the AI bot traffic hammering your website comes from Meta

AI agent traffic across DataDome’s network grew 41.5% quarter over quarter to nearly 25 billion requests in Q3 2026, according to the company’s AI Traffic Report Q3 2026. Meta’s Muse generated 29.1 million requests between September 22 and October 3, i… Continue reading Half the AI bot traffic hammering your website comes from Meta→

Half the AI bot traffic hammering your website comes from Meta

AI agent traffic across DataDome’s network grew 41.5% quarter over quarter to nearly 25 billion requests in Q3 2026, according to the company’s AI Traffic Report Q3 2026. Meta’s Muse generated 29.1 million requests between September 22 and October 3, i… Continue reading Half the AI bot traffic hammering your website comes from Meta→

Ransomware pressure now reaches employees’ homes and families

Ransomware attackers threatened employees’ family members or friends at 37% of organizations surveyed for Semperis’ 2026 Ransomware Risk Report. The survey covered 1,200 IT and security professionals at organizations that had experienced at least one s… Continue reading Ransomware pressure now reaches employees’ homes and families→

Android adds AI-powered scam alerts, hangs up on bank impostors

Google’s new scam protections cover Google Messages and third-party messaging apps, with an enhanced protection mode, expanded scam alerts and safeguards against call-forwarding and screen-sharing scams. “With scams growing harder to spot, it’s nearly … Continue reading Android adds AI-powered scam alerts, hangs up on bank impostors→

Stolen AI API keys are paying for hackers’ autonomous scans

A seller on a restricted criminal forum is marketing an autonomous hacking tool that runs on stolen OpenAI, Anthropic and Google API keys, so the key’s owner pays for the scans. Bitsight’s threat intelligence team tracked the shift across t… Continue reading Stolen AI API keys are paying for hackers’ autonomous scans→

DDoS attacks can knock services offline before links reach capacity

More than 9.1 million DDoS attacks were recorded globally between January and June 2026, an increase of nearly a quarter year over year, according to Netscout’s DDoS Threat Intelligence Report. Large attacks and distributed targeting strain defenses At… Continue reading DDoS attacks can knock services offline before links reach capacity→

Fake CAPTCHAs are tricking users into running malware on their own devices

Fake CAPTCHA checks are being used to do more than hide phishing pages. Attackers are turning the familiar “prove you’re human” step into a gateway for malware downloads, malicious browser notifications, and commands that victims are tricked into runni… Continue reading Fake CAPTCHAs are tricking users into running malware on their own devices→