Senator Mark Warner introduced legislation Wednesday requiring CISA to update cybersecurity plans for all 16 critical infrastructure sectors, citing AI-enabled threats. The bill mandates biennial upda…
Hackers on the Hill returns to Washington DC on June 16, 2026, as the first Capitol-side researcher-to-policymaker gathering of the year. The White House signed the Mythos-era AI cybersecurity executi…
The disclose.io Upcoming Dates page is now live, providing a community-maintained calendar tracking policy deadlines, regulations, conferences, and legislation affecting vulnerability disclosure and s…
The Cybersecurity and Infrastructure Security Agency will release a binding operational directive to federal agencies by the end of the week to implement the president's artificial intelligence execut…
President Donald Trump issued an executive order directing agencies including the Pentagon and CISA to strengthen cyber defenses using AI tools within 30 days. The order allows AI developers to volunt…
A cluster of cybersecurity incidents disclosed in late May 2026 marks a shift from AI as a hacking tool to an autonomous operator that decides and acts independently. Sysdig's Threat Research Team doc…
A developer has outlined a method for running untrusted AI agent code without Docker, using hardware-level isolation via Firecracker microVMs, Kata Containers, or gVisor to avoid shared kernel vulnera…
Geordie AI's $30 million Series A funding signals that enterprise adoption of agentic AI is outpacing security controls, creating a new crisis for platform engineers in 2026. Autonomous AI agents that…
Elon Musk, Mark Zuckerberg, and David Sacks killed a draft AI safety executive order from President Donald Trump in three phone calls over a Wednesday night and Thursday morning, preventing the order …
The U.S. Cybersecurity & Infrastructure Security Agency (CISA) is facing congressional scrutiny after a contractor intentionally published sensitive AWS GovCloud keys and other agency secrets on a pub…
Lawmakers from both chambers of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after a contractor intentionally published sensitive credentials, inc…
A contractor for the U.S. Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository until recently that exposed credentials for highly privileged AWS GovCloud account…
Supply chain attacks on npm and GitHub Actions are exploiting the gap between malicious package publication and CVE issuance, with attackers publishing compromised versions that are installed by thous…
GitHub's Chief Information Security Officer, Alexis Wales, is leading an investigation into unauthorized access to GitHub-owned repositories. Wales, who has 20 years of experience defending networks f…
Importance of building secure and efficient AI agents that operate directly on consumer hardware rather than relying on cloud services. It highlights security risks like the CISA Admin leak of AWS Gov…
A security researcher discovered that the U.S. Cybersecurity & Infrastructure Agency (CISA) had exposed a large cache of plaintext passwords, SSH private keys, and other sensitive credentials in a pub…
Meta committed $145 billion to AI infrastructure the same week it began firing approximately 8,000 employees, framing the cuts as a recalibration to "AI reality." Standard Chartered separately announc…
A contractor for the Cybersecurity & Infrastructure Security Agency (CISA) publicly exposed highly sensitive credentials on a GitHub repository, including keys to AWS GovCloud accounts and plaintext p…
The third annual VulnCon 2026, hosted by FIRST and the CVE Program, drew 350 in-person and 130 virtual attendees from 25 countries to Scottsdale, Arizona, for a week focused on vulnerability managemen…