Authentication Failures (A07) show the largest gap in the dataset: a 48-percentage-point difference between leaders and the field. Leaders fix at nearly 60%, while the field sits at roughly 12%.

ChatGPT and Codex flaws patched Feb 2026 exposed DNS exfiltration and GitHub tokens, raising enterprise AI security risks.

Security researchers from Georgia Tech have observed a surge in reported CVEs for which the flaw was introduced by ...

Oracle has released an emergency update for Identity Manager and Web Services Manager to close a code smuggling vulnerability ...

Copilot Autofix, a new addition to the GitHub Advanced Security service, analyzes vulnerabilities in code and offers code suggestions to help developers fix them. GitHub has unveiled Copilot Autofix, ...

Russia-linked APT28 has exploited a high-severity XSS vulnerability in Zimbra in attacks against Ukrainian entities.

A critical security vulnerability in Langflow allows attackers to push and execute malicious code on PCs. A security patch is ...