Sysdig's Threat Research Team observed what it assesses as the first documented ransomware operation executed end-to-end by a large language model agent, named JADEPUFFER. The agent exploited a known …
A Medium article details an automated workflow that uses AI to discover newly added CISA KEV vulnerabilities, generate Sigma detection rules, map them to MITRE ATT&CK, and distribute results to platfo…
A FIRST blog forecast reveals CVE volumes are tracking 46% above original projections, driven by AI-assisted discovery and structural reporting changes, with an estimated 66,000 vulnerabilities expect…
An amateur attacker in Addis Ababa used Claude Opus 4.5 and OpenAI Codex to breach at least fourteen companies, with the AI autonomously conducting reconnaissance, exploiting vulnerabilities, and exfi…
Five Eyes intelligence agencies warned that frontier AI could transform cyber offense and defense within months, not years, urging organizations to embed cyber resilience as a core business priority. …
Amazon Q Developer's VS Code extension automatically executed MCP server configurations from workspace files without user consent, exposing AWS credentials. Wiz Research disclosed CVE-2026-12957 (CVSS…
The US government hardened its frontier AI gatekeeping regime as OpenAI's GPT-5.6 Sol joined Anthropic's Mythos 5 behind a federal access wall, restricting deployment to government-approved customers.…
A high-severity flaw in Amazon Q Developer allowed malicious code repositories to silently execute commands on developers' machines and steal AWS credentials. Wiz Research discovered the vulnerability…
President Trump signed Executive Order 14409 on June 2, 2026, directing CISA to issue new binding operational directives for civilian network defense and requiring agencies to deploy AI-enabled defens…
Rep. Delia Ramirez, the top Democrat on the House Homeland Security Committee's cybersecurity panel, plans to introduce a bill by next year to dismantle the Department of Homeland Security and spin of…
Meta remains the only major U.S. AI lab that has not joined the White House's voluntary pre-deployment review program for advanced AI models, which allows agencies like the NSA and CISA to assess mode…
Anthropic's AI model Mythos identified vulnerabilities in classified US government computer systems within hours during a controlled red-team exercise, according to a US official. The test, part of Pr…
The cybersecurity chiefs of the Five Eyes nations jointly warned on June 23, 2026, that frontier AI models will reshape cyberattacks within months, not years. The statement, published on CISA's site, …
Five Eyes cybersecurity agencies warned CSOs to rewrite cyber risk strategies as threat actors increasingly use AI to evade defenses, stating that frontier AI models will transform offensive and defen…
The Five Eyes intelligence alliance warned that advanced AI models capable of sophisticated cyberattacks will become publicly available within months, not years, fundamentally reshaping cybersecurity.…
Three days after Anthropic shipped Mythos 5 to vetted defenders, the US government used export control to recall it worldwide. CISA's BOD 26-04 also retires the fixed-deadline KEV model for a risk sco…
Approximately 7,000 publicly exposed Langflow server instances are under active attack due to critical remote code execution vulnerabilities, including CVE-2026-5027, CVE-2026-33017, and CVE-2025-3248…
The Forum of Incident Response and Security Teams (FIRST) concluded its 38th annual conference in Denver, highlighting a record surge in cyber vulnerabilities driven by AI-assisted discovery, with 202…
The Trump administration and Anthropic are building a framework to evaluate security vulnerabilities in frontier AI models, with an executive order signed on June 2, 2026, establishing a voluntary pre…
The Cybersecurity and Infrastructure Security Agency has received full access to Anthropic's Mythos Preview model, a powerful AI tool for vulnerability scanning, but the White House has not yet set cl…