Independent reporting on AI security, exploited vulnerabilities, and enterprise cyber risk. Built to help defenders understand what changed and what deserves action.
AI Security
A critical command injection vulnerability in GitHub's internal protocol allowed remote code execution with a single git push. CVE-2026-3854 exposed millions of repositories to cross-tenant access - and 88% of enterprise servers remain unpatched.
Read intelligence ↗
AI Security
The Arup deepfake fraud cost $25 million in September 2026, signaling a terrifying new era where AI agents autonomously execute social engineering attacks. Discover how agentic AI is amplifying deepfake threats and the critical defenses enterprises need now.
Read intelligence ↗
AI Security
Critical CVE-2026-42208 exposes LiteLLM to pre-authentication SQL injection, enabling attackers to extract API keys and escalate to full RCE. Sysdig detected exploitation within 36 hours of disclosure. Learn the attack chain and urgent defenses.
Read intelligence ↗
AI Security
Utility giant Itron confirmed a cyberattack on its internal IT systems, exposing risks to critical infrastructure. Discover what CISOs must learn about OT/IT separation, incident response, and protecting the energy grid.
Read intelligence ↗
AI Security
The US State Department orders global diplomatic push warning allies about Chinese AI companies including DeepSeek, Moonshot AI, and MiniMax allegedly stealing American AI IP through model distillation.
Read intelligence ↗
AI Security
OpenAI released GPT-5.5 with stronger cybersecurity safeguards and a $25,000 Bio Bug Bounty challenging researchers to find universal jailbreaks. With Irregular Labs confirming improved offensive capabilities and the model now available via API, CISOs should treat this as a public stress test for high-stakes AI safety controls.
Read intelligence ↗
AI Security
House lawmakers witnessed a chilling demonstration of jailbroken AI models that bypassed safety guardrails to plan terror attacks, build bombs, and launch cyberattacks. Discover what this means for enterprise AI security and why your organization needs immediate defensive action.
Read intelligence ↗
AI Security
At Google Cloud Next '26, Google unveiled Fraud Defense - the evolution of reCAPTCHA for the agentic web - and partnered with Check Point for AI agent guardrails. With OpenClaw flaws exposing 28,000+ systems, discover why Google's $32B cybersecurity investment may define AI security standards.
Read intelligence ↗
AI Security
New research from Cloud Security Alliance and Cybersecurity Insiders reveals a shocking AI agent visibility crisis: 92% of enterprises lack visibility into AI identities, 82% discovered unknown agents, and 65% suffered security incidents. Combined with Google's newly patched Antigravity IDE vulnerability, this exposes why traditional security controls are failing against the agentic AI threat.
Read intelligence ↗Showing 217-225 of 314 articles