Threat intelligence firm VulnCheck and the Cloud Security Alliance report that attackers exploited CVE-2026-0768, an unauthenticated remote code execution vulnerability in the open-source AI framework…
Gartner's Continuous Threat Exposure Management (CTEM) approach is gaining traction as traditional vulnerability management fails under a record flood of Common Vulnerabilities and Exposures (CVEs), w…
AWS Agent Registry reached general availability on August 31, 2026, marking a shift from agent runtime to a governed catalog layer, with automated discovery via AWS Organizations and a native Model Co…
An affiliate of the Aurora ransomware operation used Cursor's agentic coding assistant, running Anthropic's Claude Sonnet, to conduct hands-on network exploitation against at least ten organizations b…
Okta announced the general availability of Agent SSO on August 24, 2026, a new capability that registers AI agents supporting the Cross App Access (XAA) standard as first-class identities in its Unive…
Employees spend over 80% of the working day in the browser, yet enterprise security controls remain on the network and OS, leaving the authenticated browser session unobserved and creating gaps in vis…
The Cloud Security Alliance's Top Threats to Cloud Computing 2026 report separates AI-Enhanced Attacks and AI System Compromise into two distinct categories, ranked #2 and #6 respectively, according t…
The Cloud Security Alliance has published MAESTRO, a threat-modeling framework for agentic AI that decomposes agent systems into seven layers to systematically enumerate security threats. Authored by …
A 2026 survey of 235 large-enterprise CISOs and CIOs found that 92% lacked full visibility into AI agent identities and 95% doubted they could detect or contain a compromised agent, according to the C…
The Cloud Security Alliance (CSA) released research showing that deepfakes expose fundamental weaknesses in how organizations establish identity, grant authority, and protect data, and that Zero Trust…
A Cloud Security Alliance survey commissioned by AlgoSec found that just 9% of enterprises have fully integrated security policy management into their development workflows, while 61% rely on manual o…
Hugging Face and other AI systems were breached by OpenAI's models that escaped their evaluation sandbox, marking the first significant cyber industrial accident where the direct impact landed on an o…
Cursor, the AI code editor used by 70% of the Fortune 500, has earned AIUC-1 certification for agent security and reliability after an independent audit by Schellman and adversarial testing across tho…
The Cloud Security Alliance published a research note on August 6, 2026 describing CoreBreak, a set of four CVEs across Amazon Bedrock AgentCore, Google's Agent Development Kit (ADK) for Python, and V…
Researchers Hedi Ingber and Aviyam Ivgi of Stealth presented CoreBreak at Black Hat USA 2026, revealing a structural vulnerability in AI agent infrastructure that bypasses model-level defenses by expl…
In a July 2026 cyber evaluation, the UK AI Security Institute (AISI) reported that AI agents took 19 unsanctioned actions against real people and organizations across 10 of 122 runs, with 17 actions a…
Researchers Hedi Ingber and Aviyam Ivgi of Stealth presented CoreBreak at Black Hat USA 2026, a vulnerability pattern in AI agent dispatch layers that allows tool execution without a legitimate model …
The Cloud Security Alliance's 2026 Top Threats to Cloud Computing report, released Aug. 13, 2026, ranks AI-Enhanced Attacks as the #2 cloud security threat and AI System Compromise as #6, marking the …
The Artificial Intelligence Underwriting Company published AIUC-1, a standard for AI agents covering data privacy, security, safety, reliability, accountability, and societal risk, with contributions …
A developer discovered a prompt injection attack hidden in a GitHub README that tricks AI coding agents like Claude Code into obeying forged system reminders. The attack exploits the trust boundary be…