Cursor, the AI code editor used by 70% of the Fortune 500, has earned AIUC-1 certification for agent security and reliability after an independent audit by Schellman and adversarial testing across tho…
A developer discovered that a code-scanning probe written for their coding agent failed to detect a script whose control label was in uppercase, returning a plausible but incorrect count. The incident…
Hybrid key exchange for TLS 1.3, such as X25519MLKEM768, is being standardized by the IETF to protect against harvest-now, decrypt-later attacks. The change combines classical X25519 with the post-qua…
NIST published a Request for Information on August 12, 2026, seeking public input on modernizing the National Vulnerability Database (NVD) for the AI era, with comments due October 13, 2026. The RFI f…
The MLSecOps Practical Reference Guide, an open-source handbook for securing AI systems, has been released in version 1.1.3 by maintainer MHaghighian, providing a practitioner reference for AI securit…
Digital document forgery surged 244% year-over-year in 2024, with digital forgeries now representing 57% of all document fraud, according to Entrust's 2025 Identity Fraud Report. The average cost of a…
The EU AI Act, adopted in 2024, introduces risk-tiered regulation with fines up to €35 million or 7% of global turnover for non-compliance, while NIST's AI RMF provides a voluntary but influential fra…
A Senate bill introduced by Sen. Mark Warner (D-Va.) on July 21, 2026, the AI AGENT Act (S. 5051), aims to regulate AI agents by requiring real-time records and NIST-developed standards, but it does n…
The US National Institute of Standards and Technology (NIST) is asking industry for input on how to handle the growth and complexity of vulnerabilities, driven by AI, as it prepares further changes to…
AI governance is the set of processes, standards, and guardrails that ensure AI systems are safe, ethical, and aligned with human-defined objectives, according to a guide on operationalizing it in the…
Google Cloud announced a roadmap to migrate to post-quantum cryptography (PQC) by 2029, prioritizing protection against Store Now, Decrypt Later risks, digital signature forgery, and cryptographic agi…
GTK Cyber, a defense-focused cybersecurity training provider, has developed a course for the defense industrial base that teaches AI security in fully offline environments. The training addresses the …
A new Cloud Security Alliance survey reveals that 82% of enterprises have discovered previously unknown AI agents in their environments, with 41% reporting this occurred more than once, and only 18% o…
A Snyk security audit of the Agent Skills ecosystem, including Anthropic's Claude and Vercel, found that 36% of all skills contained at least one critical-level security issue, such as malware distrib…
The pyca/cryptography library now supports ML-KEM and ML-DSA, the NIST-standard post-quantum encryption and digital-signature primitives, making post-quantum cryptography available to the entire Pytho…
The NVM Express consortium released updates across all 11 NVMe specifications, including the NVMe 2.4 Base Specification and NVMe-MI 2.2, adding native SSD virtualization, post-quantum cryptography su…
JFrog Security Research reported that 54 of 55 CVE advisories published from a new GitHub account were AI-hallucinated, with six targeting SQLite and all six entering the National Vulnerability Databa…
Gartner predicts that 40% of enterprise applications will include task-specific agents by the end of 2026, up from less than 5% in 2025, and that over 40% of agentic AI projects could be canceled by t…
JFrog reported that six SQLite CVEs published by a new GitHub repository were fake, likely AI-generated, with CVSS scores ranging from 9.8 to 7.5, and none described a reproducible vulnerability. The …
Post-quantum cryptography (PQC) migration should begin with an inventory of cryptographic assets, not by replacing algorithms, according to a developer building PQC Radar. The developer argues that NI…