The Forum of Incident Response and Security Teams (FIRST) announced VulnOptiCON 2026, a three-day technical colloquium scheduled for September 23-25, 2026, in Luxembourg, to address vulnerability trac…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an advisory warning that AI-generated malware can now target Siemens S7 PLCs, with proof-of-concept code that evades static anal…
The US government has issued a critical warning about AI-powered attacks targeting Siemens S7 programmable logic controllers (PLCs) in critical infrastructure. Attackers are using AI-generated Python …
U.S. cybersecurity agencies, including the NSA, CISA, FBI, Department of Energy, and Environmental Protection Agency, issued a joint advisory Wednesday warning of ongoing AI-powered attacks exploiting…
Five US federal agencies, including the NSA, CISA, FBI, DOE, and EPA, warned Wednesday that attackers are using AI-generated exploitation scripts to hack internet-exposed Siemens S7 Series PLCs at cri…
The White House will implement an AI cybersecurity framework under Executive Order 14409, featuring a classified benchmarking process led by the National Security Agency (NSA) to evaluate 'covered fro…
The FBI, NSA, and CISA issued a joint advisory warning that hackers are actively targeting Siemens S7 Series programmable logic controllers (PLCs) used in U.S. water plants and other critical infrastr…
The NSA, CISA, and FBI warn that attackers are using AI to build exploit scripts targeting Siemens S7 controllers, drastically cutting the time and skill needed to attack industrial control systems. C…
CISA added Ray vulnerability CVE-2025-62593 to its Known Exploited Vulnerabilities catalog on August 17, 2026, with an August 20 remediation date under BOD 26-04 guidance. The code-injection flaw affe…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the critical Ray AI vulnerability CVE-2025-62593 to its Known Exploited Vulnerabilities (KEV) catalog, indicating active exploita…
A critical integer overflow vulnerability, CVE-2026-71479, in the self-hosted OpenAI-compatible LLM gateway New API (QuantumNous/new-api) allowed a single image request to turn a $0.10 balance into $1…
A 2026 arXiv audit of real-world Java workflows found only 4% compliance with least-privilege permission controls, and model-generated GitHub Actions workflows often inherit over-permissive habits fro…
NIST published a Request for Information on August 12, 2026, seeking public input on modernizing the National Vulnerability Database (NVD) for the AI era, with comments due October 13, 2026. The RFI f…
On July 23, 2026, two bills were introduced in Congress—the FRONTIER Act and the AI Kill Switch Act—each providing a mechanism for the government to issue emergency orders suspending or restricting fr…
OpenSSH 10.5, released August 11, fixes a critical ssh-agent locking bypass and two other security flaws, with the project citing AI-assisted vulnerability research as the reason for breaking its usua…
Anthropic's Mythos AI model has identified software vulnerabilities in Microsoft's SharePoint faster than Microsoft can patch them, uncovering 90 critical and 141 important bugs in April alone, accord…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the FBI warned that Gunra ransomware is exploiting known vulnerabilities to target critical infrastructure sectors, including healt…
NATO's Cyber Security Centre and AI startup AISLE have joined the CVE program as numbering authorities under the ENISA Root, enabling them to assign unique identifiers to software vulnerabilities, the…
IBM's 2026 X-Force Threat Intelligence Index found that roughly one in six breaches now involve AI, with AI-generated phishing and deepfake impersonation making up the bulk. In July 2026, security fir…
The European Central Bank (ECB) directed every significant institution under its supervision to submit a comprehensive action plan addressing AI-enabled cybersecurity threats by Oct. 31, 2026, in a su…