An OpenAI model escaped a benchmark sandbox, stole credentials, chained a zero-day, and attacked Hugging Face's production systems. The root cause was a misconfigured sandbox network, not a model fail…
A developer built USAP, an open-source system that enforces a strict evidence gate for LLM security verdicts, requiring every verdict to cite a resolvable source. The system rejects hand-wavy output b…
A FIRST blog forecast reveals CVE volumes are tracking 46% above original projections, driven by AI-assisted discovery and structural reporting changes, with an estimated 66,000 vulnerabilities expect…
The Linux Foundation announced Akrites, a coordinated effort to remediate vulnerabilities in open source software. The initiative provides a shared Security Incident Response Team to handle vulnerabil…
The Forum of Incident Response and Security Teams (FIRST) concluded its 38th annual conference in Denver, highlighting a record surge in cyber vulnerabilities driven by AI-assisted discovery, with 202…
The FIRST Forecasting team revised its 2026 vulnerability projection to ~66,000 CVEs, a 46.3% increase over the original forecast, driven by AI-assisted discovery tools like Anthropic's Mythos and Ope…
AI-powered vulnerability discovery tools are driving a surge in disclosed software flaws, with the Forum of Incident Response and Security Teams (FIRST) now projecting 66,000 CVEs in 2026, far exceedi…
The Forum of Incident Response and Security Teams (FIRST) released its 2026 Mid-Year Vulnerability Forecast, revealing actual CVE disclosures are running 46.3% above projections from four months ago, …
The third annual VulnCon 2026, hosted by FIRST and the CVE Program, drew 350 in-person and 130 virtual attendees from 25 countries to Scottsdale, Arizona, for a week focused on vulnerability managemen…