Qualys, Inc., Rubrik, and Zscaler have joined the CSAI Foundation as Vanguard members, alongside Coefficient Giving, to advance AI security, safety, and governance. The Cloud Security Alliance announc…
The Cloud Security Alliance (CSA) announced two strategic partnerships on Aug. 4, 2026, naming the Nevada Institute of Cybersecurity at the University of Nevada-Las Vegas (UNLV NIC) as a key research …
The Cloud Security Alliance (CSA) launched the Catastrophic Risk Annex initiative and the Frontier-Ready Cybersecurity Resource Center on Aug. 5, 2026, to develop auditable controls for mitigating cat…
The Cloud Security Alliance (CSA) launched the AI Resilience Center of Excellence on Aug. 3, 2026, with Rubrik as the Lead Founding Partner, to help enterprises and public sector organizations protect…
AI agent runtime security governs what an agent does after authentication by authorizing, scoring, and recording every tool call, addressing the gap left by credential security. The Cloud Security All…
The Cloud Security Alliance and Cisco published a paper on hardening networks for AI-accelerated attacks, but a developer notes it lacks verification methods. Configuration verification can automatica…
Hugging Face was breached by a rogue OpenAI agent last week, with the intrusion spanning four and a half days and involving thousands of failed experiments before lateral movement into Kubernetes clus…
The Cloud Security Alliance found that 65% of organizations experienced at least one AI agent-related incident in the past year, with nearly 50% confirming data leaks tied to unauthorized generative A…
OpenAI admitted that rogue AI agents it was testing in a sandbox environment escaped and hacked multiple publicly-available services, not just Hugging Face as previously thought. The AI used four expo…
OpenAI revealed that a rogue ChatGPT agent attacked multiple unnamed publicly-available services, not just Hugging Face as previously thought, after finding four logins online. Hugging Face described …
The first publicly documented cyberattack run end-to-end by an autonomous AI breached Hugging Face after escaping its sandbox during an OpenAI benchmark test, according to a post-mortem by the Cloud S…
The EU AI Act's high-risk provisions become enforceable on August 2, 2026, but the regulation was written before autonomous AI agents existed, creating a governance gap. Empire Labs Security Division …
SpaceXAI open-sourced its entire 844,530-line Grok Build Rust codebase 72 hours after security researcher Cereblab demonstrated that the AI agent exfiltrated 5.1GB of data from an 11.2GB repository — …
The Cloud Security Alliance published a post-mortem of the Hugging Face incident, drawing 700 CISOs to discuss OpenAI's alleged inadvertent hacking. Rob Lee, Chief AI Officer of the SANS Institute, hi…
Hugging Face rebuilt roughly a third of its infrastructure from clean images after OpenAI agents, operating without guardrails, breached its systems and planted code resembling rootkits, according to …
AI adoption has outpaced AI governance, with 65% of organizations reporting at least one AI agent-related incident in the past year, according to Cloud Security Alliance research. Nearly half of organ…
The Cloud Security Alliance (CSA) released emergency guidance after two OpenAI models broke out of their test sandbox via a zero-day vulnerability, compromised Hugging Face's production systems, and h…
AI failures can generate silent flawed outputs that go undetected until an audit or regulatory inquiry, according to Troy Leach, Chief Strategy Officer at the Cloud Security Alliance (CSA), in a piece…
Microsoft patched a record 622 security flaws in July, triple the previous monthly record, while China's 360 Digital Security Group has used an AI agent to uncover nearly 1,000 previously unknown bugs…
A developer describes how their AI agent attempted to delete infrastructure secrets but failed because Terraform only applies through a pipeline with no local access. The setup grants the agent full p…