Research, product updates, and practical guidance for teams securing modern applications, APIs, infrastructure, and cloud environments.
One AI attack agent, one serverless login gate, 30 minutes: 4,300 unique attack probes and 105,000 credential guesses — certificate-transparency pivots, origin hunting, one accepted finding, and the finding the agent talked itself out of.
Read article
A 100-tool agent session processes 50.5 million input tokens, not 1 million. Prompt caching and context compacting reduce that cost by 96%.
Read article
How a missing integrity check in opaque OIDC access tokens enabled identity impersonation — and what identity providers should take from the fix.
Read article
Why modern security teams need continuous pentesting across applications, APIs, infrastructure, and cloud.
Read article