Cybersecurity articles tagged #Application Security on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/ai-vulnerability-surge-enterprise-security-strategieshttps://runtimerebel.com/blog/ai-vulnerability-surge-enterprise-security-strategiesNew research suggests the anticipated increase in AI vulnerabilities can be managed by enterprise security teams with effective strategies.Thu, 03 Sep 2026 02:06:02 GMTAIMachine LearningApplication SecurityVulnerability ManagementEnterprise Securityhttps://runtimerebel.com/blog/owasp-releases-top-10-security-list-and-universal-skill-format-for-aihttps://runtimerebel.com/blog/owasp-releases-top-10-security-list-and-universal-skill-format-for-aiOWASP debuts a top 10 security list and Universal Skill Format to secure AI add-ons, addressing modern artificial intelligence risks.Sat, 22 Aug 2026 00:41:22 GMTOWASPArtificial IntelligenceApplication SecurityZero-Dayhttps://runtimerebel.com/blog/ai-browser-prompt-injection-flaws-defeat-vendor-guardrailshttps://runtimerebel.com/blog/ai-browser-prompt-injection-flaws-defeat-vendor-guardrailsNew security research reveals that AI-powered web browsers remain susceptible to persistent prompt injection flaws despite guardrails.Sun, 09 Aug 2026 16:25:35 GMTArtificial IntelligenceBrowser SecurityZero-DayApplication Securityhttps://runtimerebel.com/blog/ai-generated-patches-high-failure-rate-new-vulnerabilitieshttps://runtimerebel.com/blog/ai-generated-patches-high-failure-rate-new-vulnerabilitiesA recent study reveals that AI-generated software patches fail in approximately half of all cases, often introducing new bugs or bypass vulnerabilities.Sat, 08 Aug 2026 00:55:21 GMTAISoftware PatchingApplication SecurityVulnerability ManagementSecure Developmenthttps://runtimerebel.com/blog/ai-agent-sandbox-escape-applying-traditional-security-to-novel-threatshttps://runtimerebel.com/blog/ai-agent-sandbox-escape-applying-traditional-security-to-novel-threatsOpenAI's AI agent sandbox escape highlights critical security gaps. Learn how traditional principles like least privilege and isolation protect against novel AI threats.Tue, 28 Jul 2026 21:10:49 GMTAI AgentsSandbox EscapeApplication SecurityOpenAILeast PrivilegeIsolationThreat Intelligencehttps://runtimerebel.com/blog/palo-alto-networks-acquires-embrace-security-observability-implicationshttps://runtimerebel.com/blog/palo-alto-networks-acquires-embrace-security-observability-implicationsPalo Alto Networks acquires Embrace, deepening its cloud security capabilities by integrating observability for enhanced application protection and threat detection.Wed, 22 Jul 2026 17:22:46 GMTPalo Alto NetworksEmbraceObservabilityCloud SecurityAcquisitionApplication Securityhttps://runtimerebel.com/blog/ai-generated-code-vulnerabilities-framework-pairing-is-key-to-riskhttps://runtimerebel.com/blog/ai-generated-code-vulnerabilities-framework-pairing-is-key-to-riskAI-generated code introduces an average of 15 vulnerabilities per codebase. This analysis explores how framework choices significantly influence the actual security risk.Tue, 21 Jul 2026 13:56:54 GMTAI Generated CodeCode SecurityApplication SecurityVulnerabilitiesDeveloper SecuritySecure Developmenthttps://runtimerebel.com/blog/2-click-cursor-exploit-dev-environment-takeover-risks-mitigationshttps://runtimerebel.com/blog/2-click-cursor-exploit-dev-environment-takeover-risks-mitigationsAnalyze the '2-click cursor exploit' leveraging 'age-old bugs' to compromise developer environments, risking source code and IP theft.Wed, 15 Jul 2026 13:49:23 GMTDeveloper EnvironmentsSupply Chain SecurityApplication SecurityExploitationSource Code Thefthttps://runtimerebel.com/blog/ai-code-generation-security-risks-managing-vibe-coding-governancehttps://runtimerebel.com/blog/ai-code-generation-security-risks-managing-vibe-coding-governanceLearn how to manage AI code generation security risks and implement governance for vibe coding practices in the software development lifecycle.Mon, 08 Jun 2026 17:13:52 GMTVibe CodingAI SecurityLLM GovernanceShadow AIApplication Securityhttps://runtimerebel.com/blog/securing-agentic-ai-deployments-mitigating-overlap-riskshttps://runtimerebel.com/blog/securing-agentic-ai-deployments-mitigating-overlap-risksUnderstanding the security risks in agentic AI deployments is crucial. This article outlines how AI agents' interaction with software tools creates vulnerabilities and…Thu, 28 May 2026 17:25:59 GMTAgentic AIAI SecurityApplication SecurityResponsible AISecure Deploymenthttps://runtimerebel.com/blog/npm-staged-publishing-new-2fa-controls-prevent-supply-chain-attackshttps://runtimerebel.com/blog/npm-staged-publishing-new-2fa-controls-prevent-supply-chain-attacksGitHub introduces staged publishing for npm, requiring manual 2FA approval for package releases to mitigate malicious automated updates and account takeovers.Sat, 23 May 2026 20:21:54 GMTNPMGitHubSupply Chain SecurityTwo Factor AuthenticationStaged PublishingApplication Securityhttps://runtimerebel.com/blog/software-supply-chain-security-addressing-visibility-gapshttps://runtimerebel.com/blog/software-supply-chain-security-addressing-visibility-gapsAn analysis of the growing software supply chain crisis, focusing on the acceleration of vulnerability exploitation and the lack of systemic visibility.Thu, 21 May 2026 09:16:05 GMTSoftware Supply ChainVulnerability ManagementSBOMApplication Securityhttps://runtimerebel.com/blog/openclaw-claw-chain-vulnerabilities-credential-theft-persistencehttps://runtimerebel.com/blog/openclaw-claw-chain-vulnerabilities-credential-theft-persistenceAnalysis of 'Claw Chain' vulnerabilities in OpenClaw, an AI agent framework, detailing credential theft, privilege escalation, and persistence risks.Tue, 19 May 2026 00:58:13 GMTOpenClawAI Agent FrameworkClaw ChainCredential TheftPrivilege EscalationPersistenceApplication Securityhttps://runtimerebel.com/blog/github-high-severity-bug-discovered-via-ai-reverse-engineeringhttps://runtimerebel.com/blog/github-high-severity-bug-discovered-via-ai-reverse-engineeringWiz utilized AI reverse-engineering to uncover a high-severity vulnerability within GitHub, demonstrating advanced discovery methods for complex bugs.Wed, 29 Apr 2026 20:32:08 GMTGitHubApplication SecurityAI in SecurityVulnerability DiscoveryReverse EngineeringWizhttps://runtimerebel.com/blog/glassworm-campaign-leverages-malicious-vs-code-extensionshttps://runtimerebel.com/blog/glassworm-campaign-leverages-malicious-vs-code-extensionsRuntime Rebel details the GlassWorm campaign, which infects developers via malicious Visual Studio Code extensions on Open VSX, facilitating a supply chain attack.Tue, 28 Apr 2026 16:45:38 GMTGlassWormVS CodeOpen VSXSupply Chain AttackMalwareDeveloper ToolsApplication Securityhttps://runtimerebel.com/blog/ai-coding-tools-new-challenges-for-endpoint-security-defenseshttps://runtimerebel.com/blog/ai-coding-tools-new-challenges-for-endpoint-security-defensesA security researcher demonstrates how AI coding tools can bypass traditional endpoint security measures, prompting a reevaluation of defense strategies.Wed, 25 Mar 2026 00:37:30 GMTAI Coding ToolsEndpoint SecurityApplication SecurityThreat Researchhttps://runtimerebel.com/blog/raven-emerges-from-stealth-with-20m-for-runtime-securityhttps://runtimerebel.com/blog/raven-emerges-from-stealth-with-20m-for-runtime-securityRaven secures $20M in funding to launch a runtime application security platform designed to detect anomalous behavior and block sophisticated cyberattacks.Thu, 19 Mar 2026 12:19:58 GMTRavenRuntime SecurityApplication SecurityCloud NativeBehavioral Analysishttps://runtimerebel.com/blog/critical-openclaw-flaw-in-ai-agents-risks-and-remediation-guidehttps://runtimerebel.com/blog/critical-openclaw-flaw-in-ai-agents-risks-and-remediation-guideA critical OpenClaw vulnerability in widely adopted AI agents could lead to severe security risks. Understand the impact and crucial remediation steps.Tue, 03 Mar 2026 00:36:48 GMTOpenClawAI AgentsVulnerabilityApplication SecurityPatching