The US Cybersecurity and Infrastructure Security Agency (CISA) added a Langflow vulnerability (CVE-2026-55255) to its Known Exploited Vulnerabilities catalog after the Sysdig Threat Research Team obse…
CISA is using Anthropic Mythos to audit federal code repositories for vulnerabilities, according to reports from Reuters, SecurityWeek, and The Next Web. The Attack Surface Evaluation team has already…
The Trump administration's AI cybersecurity clearinghouse, mandated by executive order, missed its 30-day deadline to coordinate vulnerability scanning and patching in critical infrastructure. Experts…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is using Anthropic's AI model Mythos to audit government software for vulnerabilities, according to three sources. The audits, conducte…
Sam Altman is reportedly discussing giving the US government a 5% stake in OpenAI, worth roughly $320 per American household, to address concerns about AI benefiting from human work and to provide a s…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is using Anthropic's Mythos model to scan government code repositories for security vulnerabilities, uncovering numerous bugs. The Nati…
The US Cybersecurity and Infrastructure Security Agency is using Anthropic's AI model Mythos to audit government code for vulnerabilities, according to three anonymous sources. The arrangement comes d…
Banks are rapidly adopting agentic AI systems that can take actions, not just answer questions, creating a new security risk of overprivileged agents. In April 2026, Five Eyes cyber agencies issued jo…
Sysdig's Threat Research Team disclosed JADEPUFFER on July 1, 2026, as the first documented agentic ransomware operation driven end-to-end by an LLM agent. The attack exploited CVE-2025-3248 in LangFl…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is using Anthropic's Mythos tool to audit government code for vulnerabilities, despite a federal ban on Anthropic's AI. The tool has al…
Security firm Sysdig reports the first known agentic ransomware operation, dubbed JADEPUFFER, where an AI language model autonomously broke into a server, stole credentials, and destroyed databases wi…
Sysdig's Threat Research Team observed what it assesses as the first documented ransomware operation executed end-to-end by a large language model agent, named JADEPUFFER. The agent exploited a known …
A Medium article details an automated workflow that uses AI to discover newly added CISA KEV vulnerabilities, generate Sigma detection rules, map them to MITRE ATT&CK, and distribute results to platfo…
A FIRST blog forecast reveals CVE volumes are tracking 46% above original projections, driven by AI-assisted discovery and structural reporting changes, with an estimated 66,000 vulnerabilities expect…
An amateur attacker in Addis Ababa used Claude Opus 4.5 and OpenAI Codex to breach at least fourteen companies, with the AI autonomously conducting reconnaissance, exploiting vulnerabilities, and exfi…
Five Eyes intelligence agencies warned that frontier AI could transform cyber offense and defense within months, not years, urging organizations to embed cyber resilience as a core business priority. …
Amazon Q Developer's VS Code extension automatically executed MCP server configurations from workspace files without user consent, exposing AWS credentials. Wiz Research disclosed CVE-2026-12957 (CVSS…
The US government hardened its frontier AI gatekeeping regime as OpenAI's GPT-5.6 Sol joined Anthropic's Mythos 5 behind a federal access wall, restricting deployment to government-approved customers.…
A high-severity flaw in Amazon Q Developer allowed malicious code repositories to silently execute commands on developers' machines and steal AWS credentials. Wiz Research discovered the vulnerability…
President Trump signed Executive Order 14409 on June 2, 2026, directing CISA to issue new binding operational directives for civilian network defense and requiring agencies to deploy AI-enabled defens…