The intelligence feedUpdated as material events develop
Analysis / Research / Guidance
The Briefing
Independent reporting on AI security, exploited vulnerabilities, and enterprise cyber risk. Built to help defenders understand what changed and what deserves action.
Vercel confirms major data breach via compromised Context AI OAuth tokens. Attackers selling stolen data for $2M on BreachForums. Learn how a third-party AI tool created a devastating supply chain attack.
Vercel's April 2026 security incident is more than a hosting breach. It is a sharp warning about third-party AI tools, Google Workspace OAuth abuse, and the danger of treating developer infrastructure as inherently trusted.
NSA reportedly uses Anthropic's Claude Mythos despite Pentagon 'supply chain risk' warnings, while OpenAI launches GPT-5.4-Cyber for defenders. Explore the paradox of AI cybersecurity tools that can defend or destroy.
Critical FastGPT vulnerabilities disclosed April 17, 2026 enable unauthenticated admin access via NoSQL injection. Discover how CVE-2026-40351 and CVE-2026-40352 threaten AI agent platforms and the urgent defenses enterprises need.
NIST announces it can no longer enrich all CVEs after a 263% surge in submissions. Learn how this April 2026 policy change impacts vulnerability prioritization and what defenses your enterprise needs now.
OpenAI launches GPT-5.4-Cyber for defensive cybersecurity while GitHub releases Season 4 of Secure Code Game focused on agentic AI vulnerabilities. Learn why the OWASP Top 10 for Agentic AI matters now.
University of California researchers expose a critical AI supply chain threat: malicious LLM routers that intercept data, steal crypto, and compromise credentials at scale.