Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

SquareX Researchers Reaffirms their Browser Security Thought Leadership with Multiple Vulnerability Disclosures in Key Black Hat and DEF CON 33 Talks

SquareX will be disclosing multiple key research findings at Black Hat USA and DEF CON 2025 this August. Through multiple talks, the researchers will be revealing critical architectural vulnerabilities in passkey authentication systems, enterprise DLP and browser extensions.

Secure at Inception: Introducing New Tools for Securing AI-Native Development

At Snyk, we believe you should never have to choose between speed and security. As the age of AI transforms software development, our goal is to extend our developer-first security approach to this new era, providing the essential tools your teams need to build with confidence. Today at Black Hat, we are delivering on that vision with three tangible innovations that offer a comprehensive solution to secure the entire code lifecycle with AI.

Cato CTRL Threat Research: New Streamlit Vulnerability Enables Cloud Account Takeover Attack and Stock Market Dashboard Tampering

Imagine financial analysts watching stock prices suddenly drop. Dashboards show misaligned data, market confidence disappears, and trading screens across the NASDAQ turn red. But this time, the disruption isn’t caused by politics or economic shifts. It starts with a cyberattack. We reveal how a simple and overlooked flaw in Streamlit’s file upload feature, part of a widely used open-source framework for building stock market dashboards, could be used to cause this kind of financial chaos.

Using ITDR to Protect Non-Human Identities

Non-human identities. It seems like every technology conference that I’ve attended over the past year or so has had NHIs as a primary topic. And it’s no wonder. What have become powerful tools in the new world of hyper-automation, dynamic IT infrastructures, and complex security processes, have also led to new vulnerabilities within many IT environments. For just a moment, let’s look at why NHIs are important to focus on from a security perspective. I have 3 primary vulnerabilities.

Top 7 Tools to Manage Cybersecurity Risks from AI-Generated Code and Software

Managing AIcoded ("vibe code") software vulnerabilities doesn't require a full rebuild of your security program. By combining runtime visibility with targeted guardrails, teams can close blind spots in days instead of months. Spektion makes that possible as the leading runtimefirst solution for securing and managing vulnerabilities in from AIgenerated code in live apps, delivering live behavioral insight the moment code executes.

When "Private" Isn't: The Security Risks of GPT Chats Leaking to Search Engines

In late July 2025, users discovered that ChatGPT chats, initially shared via link, were appearing in search engine results on platforms such as Google, Bing, and DuckDuckGo. These shared conversations included personal content relating to mental health, career concerns, legal issues, and more, without any indication of a data breach. Instead, the exposure resulted from a now-removed feature that enabled discoverability via search indexing.

How to find social media threats to your brand with CompassDRP

In today’s hyperconnected world, a single misleading LinkedIn or X post gone viral can cause problems for the most well established brand in a matter of minutes. Digital Risk Protection plays a vital role in uncovering and neutralizing these hidden dangers before they escalate. We’ll run through some real-world examples with Outpost24’s CompassDRP solution to show how you can proactively monitor for social media threats before they damage your brand.