Roughly 73% of global organizations have integrated AI into cybersecurity defenses, and nearly all plan to keep investing through 2025, as the AI industry faces rising physical threats and an 'AI vs. …
A developer outlines a framework for defining and enforcing vulnerability remediation SLAs in 2026, emphasizing that Mean Time to Remediate (MTTR) is the ultimate measure of security posture. The post…
The White House has launched Gold Eagle, an AI-powered cybersecurity initiative using Anthropic's Mythos AI models to detect and patch software vulnerabilities across critical infrastructure and suppl…
Microsoft released a record 570 security patches for Windows, Office, and other products on Tuesday, citing its use of AI to aid vulnerability discovery. At least two of the flaws are zero-days, inclu…
The White House on Tuesday launched Gold Eagle, a new AI-backed clearinghouse designed to pool software vulnerability findings from government and industry and coordinate fixes across U.S. critical in…
Microsoft's July 2026 Patch Tuesday fixes a record 570 vulnerabilities, a 316% increase from July 2025, driven by its new AI-powered MDASH system. Three zero-days are included, with two actively explo…
Microsoft shipped fixes for a record 570 vulnerabilities on its July 2026 Patch Tuesday, nearly triple June's previous high, with 59 critical bugs and three zero-days, two already exploited in the wil…
Microsoft released two open-source tools in May — RAMPART and Clarity — to help developers test AI agents for adversarial failure modes before deployment. RAMPART is a pytest-native framework for writ…
The White House on Tuesday launched 'Gold Eagle,' an AI-backed clearinghouse to consolidate software vulnerability findings from government and industry, prioritize flaws, and coordinate remediation a…
President Trump signed Executive Order 14409 on June 2, 2026, directing the creation of an AI cybersecurity clearinghouse within 30 days, managed by the Secretary of the Treasury alongside the Nationa…
AI is now involved in every stage of a cyberattack, from identifying targets to stealing data, according to research from Check Point. Criminal groups have been breaching government agencies using AI …
GitHub shipped CodeQL 2.26.0 on July 10 with a new static analysis query, js/system-prompt-injection, that detects untrusted user input flowing into AI model system prompts in JavaScript and TypeScrip…
Orca Security's 2026 State of AI Security Report found that 99.9% of fixable AI vulnerabilities remain unpatched across 1,200+ production cloud environments, with 50% of AI package vulnerabilities now…
CISA added Langflow, the open-source AI workflow builder, to its Known Exploited Vulnerabilities catalog on July 7, 2026, marking the first AI agent orchestration platform in KEV, after two actively e…
On May 8, 2026, BerriAI disclosed CVE-2026-42271, a command-injection flaw in LiteLLM, one of the most widely deployed open-source AI gateways. The vulnerability scored CVSS 8.8 and affects releases f…
OpenAI launched GPT-5.6 Sol on July 9 after the White House lifted a restriction that had limited access to government-vetted partners, but the UK AI Security Institute found universal jailbreaks enab…
A ransomware gang called Radiant hacked nursery chain Kido, stealing personal data on 8,000 children. Meanwhile, OpenAI hit a $500 billion valuation, and a wave of security breaches hit Google Ads, su…
A new six-stage maturity model for non-human identities (NHIs) addresses the identity governance gap exposed by agentic AI, where LLM-based agents with excessive privileges have caused production outa…
CISA added an authorization-bypass vulnerability in Langflow, a visual framework for building AI-agent workflows, to its Known Exploited Vulnerabilities catalog on July 7, 2026, giving federal agencie…
The White House issued an executive order accelerating the timeline for post-quantum cryptography (PQC) implementation, requiring federal contractors to comply with NIST standards by 2030. The order a…