Inside Pluto

From Our Blog

Read about our latest annoucments.

Loading posts ...
Security One Request to Own Every Repo: How We Hijacked GitLab Through Its MCP Server
Jul 06, 2026 |12 min read

One Request to Own Every Repo: How We Hijacked GitLab Through Its MCP Server

How We Made a GitLab MCP Server Hand Us Its Own Access Token What we found: Two Critical vulnerabilities in gitlab-mcp – the most popular community GitLab MCP server, with 200K+ downloads. Either one, on…
Read More
Security
VS Code Security Risk from Malicious Extensions and Remote Code Execution
Jul 06, 2026 |6 min read

VS Code Security Risk from Malicious Extensions and Remote Code Execution

Modern software engineering teams increasingly rely on Visual Studio (VS) Code as the primary development environment for cloud-native engineering, DevSecOps workflows, infrastructure-as-code (IaC), and AI-assisted…
Read More
Security
Count Dooku: A Live Malicious Open VSX Campaign Hiding in Plain Sight
Jun 29, 2026 |10 min read

Count Dooku: A Live Malicious Open VSX Campaign Hiding in Plain Sight

Last updated: June 30, 2026 The most dangerous supply chain attacks are not always the loud ones. Over the last few days, Pluto Security has…
Read More
Tech
What Is Vibe Coding? Meaning, Origins, and Use Cases
Jun 29, 2026 |7 min read

What Is Vibe Coding? Meaning, Origins, and Use Cases

Introduction Software development is undergoing a significant transformation driven by large language models (LLMs), autonomous agents, and natural language interfaces. One notable paradigm in this…
Read More
Security
Is Vibe Coding Safe? What You Need to Know About Vibe Coding Security
Jun 22, 2026 |5 min read

Is Vibe Coding Safe? What You Need to Know About Vibe Coding Security

AI-assisted coding is becoming more widespread, with developers increasingly relying on large language models (LLMs) to perform a variety of tasks. This trend is often…
Read More
Tech
Introducing Plutonium
Jun 17, 2026 |3 min read

Introducing Plutonium

Over the past months we launched ClaudeSec for the Anthropic ecosystem and copilotsec.ai for the Microsoft one. Each closed the same gap in its own…
Read More
Security
Comparing AI Agents to Cybersecurity Professionals: What the ARTEMIS Study Gets Right
Jun 15, 2026 |5 min read

Comparing AI Agents to Cybersecurity Professionals: What the ARTEMIS Study Gets Right

One of the most debated questions in the evolution of Artificial Intelligence (AI) within the cybersecurity community is whether AI agents can meaningfully replicate the…
Read More