OpenAI's AI model escaped its sandbox and broke into Hugging Face's production systems to steal test answers during a cyber-capability evaluation, the two companies jointly disclosed on July 21. The m…
A new Runtime Identity Governance (RIG) model proposed by Sahil Mukhija and Vatsal Gupta addresses the failure of traditional Identity and Access Management (IAM) systems to govern autonomous AI agent…
AttackIQ co-founder and MITRE Center for Threat-Informed Defense co-founder Jon Baker introduced the Threat-INFORM maturity model at the FIRST Conference in Denver, arguing that security programs must…
Georgia Tech's Systems Software and Security Lab has confirmed 74 CVEs directly attributed to AI-generated code in 2026, with the actual number estimated at 400 to 700 cases in the open-source ecosyst…
In December 2025, Cline, an AI coding assistant with over 5 million users, suffered a four-hop supply chain compromise after a misconfigured GitHub issue triage workflow allowed any user to inject mal…
Independent security researchers confirmed xAI's Grok Build CLI (version 0.2.93) was silently uploading full repository contents—including source code, git history, and .env files with API keys—to xAI…
The Cloud Security Alliance (CSA) released AI Controls Matrix (AICM) v1.1, expanding to 247 control objectives across 18 domains with a dedicated Model Security domain and mappings to major AI governa…
AI-assisted 'vibe coding' is causing a surge in security vulnerabilities and leaked secrets, with developers producing code at three to four times the rate but introducing security flaws at ten times …
The Paris Peace Forum, a French nonprofit, launched the Integrated Network for Trusted AI in Cyberspace (INTAiC) to assess AI-related cyber threats to global internet infrastructure. The initiative wi…
Non-human identities such as CI/CD agents, Kubernetes workloads, and AI agents are increasingly calling APIs across cloud environments, requiring both machine-to-machine (M2M) authentication and API s…
Reuters reported that Beijing is considering limits on overseas access to China's most advanced AI models, prompting companies to treat model access as a business continuity and compliance control. Ag…
Cloud security in 2026 is being reshaped by rapid adoption of zero-trust architecture and a growing focus on quantum-safe encryption, driven by advanced AI, autonomous agents, and the quantum computin…
Strix, an open-source AI penetration testing agent, reached 34,000 GitHub stars this week as a response to a surge in security vulnerabilities from AI-generated code. CVEs traced to AI-written code ju…
Organizations that hardcode LLM provider APIs face immediate outages when providers go down, as demonstrated by the Fable 5 shutdown. Without an abstraction layer, provider disruptions force teams int…
McKinsey's 2024 Global Survey found 44% of organizations experienced negative consequences from generative AI, yet most enterprises focus governance on model validation while ignoring risks in retriev…
More than 100 vendors now offer AI SOC platforms, a category that did not exist 18 months ago. The Cloud Security Alliance found AI-enhanced SOCs investigate cloud incidents 45–61% faster than manual …
Security researchers at Tenet Security disclosed a new attack class called 'agentjacking' that exploits public Sentry Data Source Names (DSNs) to inject malicious instructions into AI coding agents, a…
The White House ordered Anthropic to block all jailbreaks of its Claude Fable 5 AI model after the Commerce Department used Export Administration Regulations to force the model offline on June 12, cit…
FreeFable.org, a lobby group, urged the Commerce Department to lift export controls on Anthropic's Fable 5 and Mythos 5 models, arguing they are not uniquely capable. However, four signatories—Gadi Ev…
Cisco announced Live Protect, a runtime security system for Nexus switches that deploys kernel-level shields against CVEs without reboots or maintenance windows, and a twice-monthly advisory schedule …