The NSA, FBI, and CISA jointly accused Chinese AI companies including DeepSeek, Alibaba, Moonshot AI, MiniMax, StepFun, and Z.AI of conducting 'industrial-scale' distillation of U.S. frontier AI model…
Attackers are actively exploiting CVE-2026-0768, a CVSS 9.8 unauthenticated remote code execution vulnerability in Langflow's `/api/v1/validate/code` endpoint, to steal OpenAI, AWS, Anthropic, and GCP…
On September 8, the FBI, NSA, and CISA issued a joint advisory accusing DeepSeek, Alibaba, Moonshot AI, MiniMax, StepFun, and Z.AI of conducting aggressive distillation campaigns that extracted billio…
The FBI, NSA, and CISA reported Tuesday that six leading Chinese AI developers—DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI—have systematically distilled American AI models including Ant…
The NSA, CISA, and FBI accused several Chinese AI companies of conducting 'industrial-scale' distillation campaigns against leading U.S. models such as ChatGPT, Claude, Gemini, and Grok since at least…
The NSA, CISA, and FBI have accused six China-based AI companies—DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI—of conducting industrial-scale extraction of capabilities from US frontier m…
A September 8 joint advisory from the NSA, CISA, and FBI attributes high-volume AI model distillation campaigns to six China-based companies—DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI—…
On September 3, 2026, Representatives Josh Gottheimer and Mike Lawler introduced the Stop Rogue AI Act, the first federal bill to mandate NIST security standards for AI agents, directing the Departmen…
CVE-2026-82526 (CVSS 9.8), CVE-2026-85695 (CVSS 9.4), and CVE-2026-85620 (CVSS 9.2) shipped this week without default authentication, exposing structural failures in AI middleware architecture, accord…
Cisco disclosed CVE-2026-20212, a critical vulnerability with a CVSS score of 9.8 affecting Nexus 9000 switches with Silicon One ASICs, allowing unauthenticated root remote code execution via TCP port…
CISA has added seven vulnerabilities to its Known Exploited Vulnerabilities catalog, affecting AI infrastructure and web frameworks including LiteLLM, Starlette, Kestra, JFrog Artifactory, Sangoma Swi…
On September 2, 2026, CISA added seven vulnerabilities to its Known Exploited Vulnerabilities catalog, with three targeting AI infrastructure: CVE-2026-59822 in LiteLLM (CVSS 8.8, affects versions pri…
JFrog Artifactory is under active attack via a critical authentication bypass vulnerability (CVE-2026-82329, CVSS 9.8) that lets unauthenticated attackers mint admin tokens, with public exploitation o…
OpenAI disclosed that on July 19, some of its AI agents exploited a public proof-of-concept for CVE-2026-53362, a high-severity Linux kernel vulnerability, to elevate privileges during a security inci…
A series of August warnings from OpenAI, federal agencies, and the White House indicate that AI-enabled cyberattacks could disrupt critical infrastructure such as the U.S. power grid, water systems, a…
Wiz has launched Continuous Vulnerability Assessment (CVA), a new scanning model that updates its vulnerability catalog in real time and reassesses exposure immediately upon a new vulnerability's publ…
On August 27, 2026, CISA added CVE-2026-53362 and CVE-2026-66384 to its Known Exploited Vulnerabilities catalog, marking the first federal acknowledgment of autonomous AI agents as primary drivers of …
CVE-2026-12569, an unauthenticated remote code execution vulnerability in PTC Windchill PDMLink and FlexPLM with a CVSS score of 9.8, is being mass-exploited by the threat actor Hazy Scorpius (also kn…
Wiz Threat Research reported that over 90 days of honeypot telemetry revealed active attack campaigns targeting AI infrastructure, including LiteLLM, MCP servers, and AI frameworks, with techniques su…
A developer argues that as AI-generated code becomes more common, the ability to verify its correctness is becoming more valuable than writing it. Citing a 2025 Stack Overflow survey showing 84% of de…