wp2shell: Critical WordPress vulnerability allows code injection via API

By chaining an SQL injection and an API vulnerability, attackers can inject code. WordPress has released an update, the finders a hotfix.
CSOonline

Google DeepMind launches an AI agent to fix code vulnerabilities automatically

Google DeepMind has introduced an AI agent that automatically found and fixed software vulnerabilities in open source projects, submitting 72 security patches over the past six months to codebases ...

Notepad++ v8.9.8 patches 14 security vulnerabilities

On Sunday, Don Ho released version 8.9.8 of the popular editor Notepad++. It closes about code smuggling vulnerabilities.

GitHub Copilot Missed A Vulnerability That Wiz’s AI Agent Found

Wiz revealed that its AI agent discovered and exploited a GitHub Actions vulnerability to gain access to Snowflake's internal environment.
techtimes

GitHub Copilot App Now Scans In-Flight Code for Vulnerabilities Before Commit

GitHub shipped the /security-review slash command to its Copilot desktop app on July 14, making AI-driven pre-commit vulnerability scanning available to every Copilot subscriber — including Free tier ...