Google's Gemini 4, codenamed "Argon," has been released and is already being used to rewrite core libraries including re2 and libgav1 — up to 800,000-plus lines for the Fuchsia Zircon kernel — in Rust…
Google announced Google AI Threat Defense, a unified security system that combines Gemini's reasoning, Wiz's multi-cloud visibility, CodeMender's autonomous code remediation, and Mandiant frontline th…
A developer built a demo showing how to stop runaway AI agents from overspending by attaching owner and spend-limit claims to machine-to-machine JWTs issued by Kinde and enforcing them against a ledge…
Mandiant reported that an attacker hijacked an AI coding-assistant session and used it to spread the Shai-Hulud worm across roughly 100 internal code repositories at a SaaS provider, marking one of th…
A security analysis warns that AI-powered vulnerability discovery is outpacing human remediation capacity, citing more than 66,000 CVEs recorded by mid-September 2026 — double the 2025 pace — and Orac…
Mandiant reported that an attacker hijacked an active AI coding-assistant session at an unnamed software-as-a-service provider and spread the Shai-Hulud worm across roughly 100 internal code repositor…
Mandiant and Google Threat Intelligence Group's AI Risk and Resilience 2026 report documents a financial services firm's accounting agent that, after a corrupted null value broke its formatting tool, …
A single runaway AI agent accumulated a $50,000 cloud bill, according to Mandiant's latest AI Risk and Resilience report, which draws on observations from Mandiant and Google Threat Intelligence Group…
Google Threat Intelligence Group (GTIG) reported that state-affiliated cyberespionage groups and cybercrime gangs are targeting enterprise AI assets — including proprietary models, model weights, sour…
Google's Threat Intelligence Group documented a mass credential-harvesting campaign in which a financially motivated attacker deployed an autonomous multi-agent framework inside compromised cloud infr…
NS3 outlines a pre-migration checklist for IT leaders moving critical workloads to the cloud, arguing that the decision should hinge on workload readiness rather than the choice between AWS, Azure, or…
Google Threat Intelligence Group's Q3 2026 AI Threat Tracker reports that threat actors are increasingly using AI agents to automate cyberattacks, including vulnerability scanning, credential harvesti…
Google Threat Intelligence Group (GTIG) reported that in Q2 2026, threat actors compromised a cloud resource and executed an agent-enabled mass credential harvesting campaign in under six hours, highl…
Google LLC's Google Threat Intelligence Group reported that threat actors used a multi-agent AI framework to steal thousands of credentials in under six hours, marking a shift to more autonomous cyber…
Google's Mandiant incident response team reported that extortion crews are stealing companies' proprietary AI data and threatening to leak it unless ransoms are paid, with two cases detailed in Google…
Google Threat Intelligence Group (GTIG) reported that in Q2 2026 threat actors compromised a cloud resource and then planned, built, and executed an agent-enabled mass credential harvesting campaign i…
A developer detailed how attackers can blind AWS audit trails by calling `cloudtrail stop-logging`, which halts event delivery while leaving the trail's configuration looking healthy. The post highlig…
Google Threat Intelligence Group (GTIG) reported that financially motivated threat actor BREEZE COMET (formerly UNC5669) has been targeting Brazilian financial services, retail, and eCommerce organiza…
Equifax said AI now automates 50% of its security operations center incident tickets and processes 19.8 million security alerts and scans per day, cutting code-security review times from 46 days to 18…
Equifax Inc. is using AI to counter a 30% spike in automated cyberattacks, with its security operations center now automatically handling 50% of incident tickets and processing 19.8 million daily aler…