The White House will implement an AI cybersecurity framework under Executive Order 14409, featuring a classified benchmarking process led by the National Security Agency (NSA) to evaluate 'covered fro…
ISO 27001, SOC 2, and NIST frameworks were designed for human-centric workflows and fail to account for AI coding tools, leaving audit trails incomplete. A developer highlights that AI sessions lack a…
AI governance is becoming a transformation problem as organizations struggle to balance oversight with the speed of AI adoption. Shadow AI, where employees use unapproved tools, signals a design failu…
Lakshman Pandey has shipped a production retrieval-augmented generation (RAG) system for UK arts and culture clients that implements NIST AI Risk Management Framework controls. The system uses Claude …
Donely, an AI agent platform provider, outlines eight RBAC best practices for managing permissions for both human users and AI agents, emphasizing least privilege, role segregation, auditing, and cont…
OpenSSL 3.5+ now natively supports all three NIST post-quantum algorithms (ML-KEM, ML-DSA, SLH-DSA), and a hands-on test shows that post-quantum certificates are dramatically larger than classical one…
The Agent-to-Agent Protocol (A2A), supported by over 150 organizations, has reached version 1.0 with integrations across Google, Microsoft, and AWS, marking a shift toward standardized AI agent collab…
Cursor, the AI code editor used by 70% of the Fortune 500, has earned AIUC-1 certification for agent security and reliability after an independent audit by Schellman and adversarial testing across tho…
A developer discovered that a code-scanning probe written for their coding agent failed to detect a script whose control label was in uppercase, returning a plausible but incorrect count. The incident…
Hybrid key exchange for TLS 1.3, such as X25519MLKEM768, is being standardized by the IETF to protect against harvest-now, decrypt-later attacks. The change combines classical X25519 with the post-qua…
NIST published a Request for Information on August 12, 2026, seeking public input on modernizing the National Vulnerability Database (NVD) for the AI era, with comments due October 13, 2026. The RFI f…
The MLSecOps Practical Reference Guide, an open-source handbook for securing AI systems, has been released in version 1.1.3 by maintainer MHaghighian, providing a practitioner reference for AI securit…
Digital document forgery surged 244% year-over-year in 2024, with digital forgeries now representing 57% of all document fraud, according to Entrust's 2025 Identity Fraud Report. The average cost of a…
The EU AI Act, adopted in 2024, introduces risk-tiered regulation with fines up to €35 million or 7% of global turnover for non-compliance, while NIST's AI RMF provides a voluntary but influential fra…
A Senate bill introduced by Sen. Mark Warner (D-Va.) on July 21, 2026, the AI AGENT Act (S. 5051), aims to regulate AI agents by requiring real-time records and NIST-developed standards, but it does n…
The US National Institute of Standards and Technology (NIST) is asking industry for input on how to handle the growth and complexity of vulnerabilities, driven by AI, as it prepares further changes to…
AI governance is the set of processes, standards, and guardrails that ensure AI systems are safe, ethical, and aligned with human-defined objectives, according to a guide on operationalizing it in the…
Google Cloud announced a roadmap to migrate to post-quantum cryptography (PQC) by 2029, prioritizing protection against Store Now, Decrypt Later risks, digital signature forgery, and cryptographic agi…
GTK Cyber, a defense-focused cybersecurity training provider, has developed a course for the defense industrial base that teaches AI security in fully offline environments. The training addresses the …
A new Cloud Security Alliance survey reveals that 82% of enterprises have discovered previously unknown AI agents in their environments, with 41% reporting this occurred more than once, and only 18% o…